General
-
Target
2024-03-22_12657c026b5785f7799429aef887a09a_gandcrab
-
Size
73KB
-
Sample
240322-lezxaaaf78
-
MD5
12657c026b5785f7799429aef887a09a
-
SHA1
bc9dac4b13520c151665be68a961a6419358d098
-
SHA256
40d18f0986243a2d3e228d2f8cbfd8333ae0af02c497118521a051d65e4ea91d
-
SHA512
b11f6fd25b53147537b3ee0c0714b8fa1ceed0407b062c354163da19c7d7a9980553f8ec4dea71b631b00a3fcb4c56cd49392d9dd4e2c79a99a74907836c565e
-
SSDEEP
1536:T55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:PMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2024-03-22_12657c026b5785f7799429aef887a09a_gandcrab.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-22_12657c026b5785f7799429aef887a09a_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-03-22_12657c026b5785f7799429aef887a09a_gandcrab
-
Size
73KB
-
MD5
12657c026b5785f7799429aef887a09a
-
SHA1
bc9dac4b13520c151665be68a961a6419358d098
-
SHA256
40d18f0986243a2d3e228d2f8cbfd8333ae0af02c497118521a051d65e4ea91d
-
SHA512
b11f6fd25b53147537b3ee0c0714b8fa1ceed0407b062c354163da19c7d7a9980553f8ec4dea71b631b00a3fcb4c56cd49392d9dd4e2c79a99a74907836c565e
-
SSDEEP
1536:T55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:PMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-