General
-
Target
2024-02-01_dfeb5cf5b1f8852b189d77b14fd7d1e3_gandcrab
-
Size
73KB
-
Sample
240201-3j3meababp
-
MD5
dfeb5cf5b1f8852b189d77b14fd7d1e3
-
SHA1
ae663554e9043e99f2272ce4e0cd5c58a72390b0
-
SHA256
f0811e950f2e619c20b5ed2da7a414cfe3464a76fc29be73c9874f7605cd8698
-
SHA512
134fded36c52dcebb349dc3e754a663ca9baa8e12442de7279908ece8b96813b37d0fee1cef4d06f8eba1dd14441d3158864da8883ef7dcb5f176bdcb7f4ba5e
-
SSDEEP
1536:X555555555555pmgSeGDjtQhnwmmB0yYMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rx:4MSjOnrmBAMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-02-01_dfeb5cf5b1f8852b189d77b14fd7d1e3_gandcrab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-01_dfeb5cf5b1f8852b189d77b14fd7d1e3_gandcrab.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-02-01_dfeb5cf5b1f8852b189d77b14fd7d1e3_gandcrab
-
Size
73KB
-
MD5
dfeb5cf5b1f8852b189d77b14fd7d1e3
-
SHA1
ae663554e9043e99f2272ce4e0cd5c58a72390b0
-
SHA256
f0811e950f2e619c20b5ed2da7a414cfe3464a76fc29be73c9874f7605cd8698
-
SHA512
134fded36c52dcebb349dc3e754a663ca9baa8e12442de7279908ece8b96813b37d0fee1cef4d06f8eba1dd14441d3158864da8883ef7dcb5f176bdcb7f4ba5e
-
SSDEEP
1536:X555555555555pmgSeGDjtQhnwmmB0yYMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rx:4MSjOnrmBAMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-