General
- Target 2024-03-23_28c0b52cacce8950556fa740ed27fa44_gandcrab
- Size 83KB
- Sample240323-tyv2fahe58
- SHA256 f17a79cec1716f5a3829753afc069c2510851b6bb63eb66e923b11ffc2b81ca1
- MD5 28c0b52cacce8950556fa740ed27fa44
- SHA1 8f0030feabb78f91eee8c82104a7de31959796fe
- SHA512 2c03acac12bd61c79c139b87e3e4da7acf6837d18d9dd61169b2fcf7486c530d30004267f29d3ce458f3fda9e73e939f929724e5f0ab1f8b1d69944b9690717c
- SSDEEP 1536:n55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:DMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-03-23_28c0b52cacce8950556fa740ed27fa44_gandcrab.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-03-23_28c0b52cacce8950556fa740ed27fa44_gandcrab.exe
Resource
win10v2004-20240319-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
gandcrab
C2
-
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
- Target 2024-03-23_28c0b52cacce8950556fa740ed27fa44_gandcrab
- Size 83KB
- SHA256 f17a79cec1716f5a3829753afc069c2510851b6bb63eb66e923b11ffc2b81ca1
- MD5 28c0b52cacce8950556fa740ed27fa44
- SHA1 8f0030feabb78f91eee8c82104a7de31959796fe
- SHA512 2c03acac12bd61c79c139b87e3e4da7acf6837d18d9dd61169b2fcf7486c530d30004267f29d3ce458f3fda9e73e939f929724e5f0ab1f8b1d69944b9690717c
- SSDEEP 1536:n55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:DMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
- MD5 SHA1 SHA512 SSDEEP
Score6/10Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.