General
-
Target
2024-03-12_852deb1be350b87a5cda443d15bafac6_gandcrab
-
Size
88KB
-
Sample
240312-1ehekabb3z
-
MD5
852deb1be350b87a5cda443d15bafac6
-
SHA1
c595b3d38c82c6a07be96ca6c7d45f650e0f52db
-
SHA256
f703ff15dd8f91533b849986be4421b81e1a2e91665f5446218d0565303f58f1
-
SHA512
e49585164db55c57015710ab4fb60af86d18f49e480984acd92bcf5b110b677c917dbf9ed0712ca7981886af421a69d3d26732d08b5f68a25d8dc72644581960
-
SSDEEP
1536:yrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:yjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g
Behavioral task
behavioral1
Sample
2024-03-12_852deb1be350b87a5cda443d15bafac6_gandcrab.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-12_852deb1be350b87a5cda443d15bafac6_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-03-12_852deb1be350b87a5cda443d15bafac6_gandcrab
-
Size
88KB
-
MD5
852deb1be350b87a5cda443d15bafac6
-
SHA1
c595b3d38c82c6a07be96ca6c7d45f650e0f52db
-
SHA256
f703ff15dd8f91533b849986be4421b81e1a2e91665f5446218d0565303f58f1
-
SHA512
e49585164db55c57015710ab4fb60af86d18f49e480984acd92bcf5b110b677c917dbf9ed0712ca7981886af421a69d3d26732d08b5f68a25d8dc72644581960
-
SSDEEP
1536:yrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:yjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-