General
- Target 2024-03-23_2adf13476dd32a4e1da756611627a489_gandcrab
- Size 73KB
- Sample240323-bwhdfsbf46
- SHA256 2318be42b19f897031dc3e02688c77612e9a8f52b67e1c63612f9c94af391dca
- MD5 2adf13476dd32a4e1da756611627a489
- SHA1 5f4fa1b339cbcf36e355f19d3ef837443ccfc738
- SHA512 13028cc1b1b0ed8c93f36fe59560a186487138d067fa762a6e74387b85dfe4367837faaee1a85a70e8be7c6a28081a6ab1a5898d88211cdd2231d47b9bdac1dc
- SSDEEP 1536:ugSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:uMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-03-23_2adf13476dd32a4e1da756611627a489_gandcrab.exe
Resource
win7-20240319-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-03-23_2adf13476dd32a4e1da756611627a489_gandcrab.exe
Resource
win10v2004-20240226-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
gandcrab
C2
-
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
- Target 2024-03-23_2adf13476dd32a4e1da756611627a489_gandcrab
- Size 73KB
- SHA256 2318be42b19f897031dc3e02688c77612e9a8f52b67e1c63612f9c94af391dca
- MD5 2adf13476dd32a4e1da756611627a489
- SHA1 5f4fa1b339cbcf36e355f19d3ef837443ccfc738
- SHA512 13028cc1b1b0ed8c93f36fe59560a186487138d067fa762a6e74387b85dfe4367837faaee1a85a70e8be7c6a28081a6ab1a5898d88211cdd2231d47b9bdac1dc
- SSDEEP 1536:ugSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:uMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.