General
-
Target
2024-03-24_e7511cdfabfb4405c01c147d9e4e5f1a_gandcrab
-
Size
145KB
-
Sample
240324-e34rtacd51
-
MD5
e7511cdfabfb4405c01c147d9e4e5f1a
-
SHA1
ca19c2c1f40c0fbd445070fccd43ab74fc90fb32
-
SHA256
dec98228e59bd38a880b0f766b266cebef145f36264eaf87f35be702b6931a4c
-
SHA512
a812f323a0787e97f66140cffb9482ba894265e7f7e22b0e2b5503ef4e1e4c2133ccbbabc903737296e1d320a85e21fc6d766153e3be04fea37ee7161c92ad4e
-
SSDEEP
3072:jYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:jyOqqDL64vdGREz
Behavioral task
behavioral1
Sample
2024-03-24_e7511cdfabfb4405c01c147d9e4e5f1a_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-24_e7511cdfabfb4405c01c147d9e4e5f1a_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-24_e7511cdfabfb4405c01c147d9e4e5f1a_gandcrab
-
Size
145KB
-
MD5
e7511cdfabfb4405c01c147d9e4e5f1a
-
SHA1
ca19c2c1f40c0fbd445070fccd43ab74fc90fb32
-
SHA256
dec98228e59bd38a880b0f766b266cebef145f36264eaf87f35be702b6931a4c
-
SHA512
a812f323a0787e97f66140cffb9482ba894265e7f7e22b0e2b5503ef4e1e4c2133ccbbabc903737296e1d320a85e21fc6d766153e3be04fea37ee7161c92ad4e
-
SSDEEP
3072:jYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:jyOqqDL64vdGREz
Score10/10-
GandCrab payload
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-