General
-
Target
2024-03-26_223973110b4fe348c3bedfd85b2cba8e_gandcrab
-
Size
83KB
-
Sample
240326-nltd7aha77
-
MD5
223973110b4fe348c3bedfd85b2cba8e
-
SHA1
e922b3e6a2b1d48ceb5fe6a7b64e91a4917dc76d
-
SHA256
5b5e3be8cc1d7d1aec6f974d33f41c15c56e9cf950b50f464c930aa807bde14e
-
SHA512
dfbe07e4591c95a008b4e8534967fba466edb1e4df935f921e4c4f780f83c65dcb5d9028ab0a7a269f8756700f32f65171ac4b67547aed6283894b2303a43a07
-
SSDEEP
1536:r55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:XMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Behavioral task
behavioral1
Sample
2024-03-26_223973110b4fe348c3bedfd85b2cba8e_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-26_223973110b4fe348c3bedfd85b2cba8e_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-03-26_223973110b4fe348c3bedfd85b2cba8e_gandcrab
-
Size
83KB
-
MD5
223973110b4fe348c3bedfd85b2cba8e
-
SHA1
e922b3e6a2b1d48ceb5fe6a7b64e91a4917dc76d
-
SHA256
5b5e3be8cc1d7d1aec6f974d33f41c15c56e9cf950b50f464c930aa807bde14e
-
SHA512
dfbe07e4591c95a008b4e8534967fba466edb1e4df935f921e4c4f780f83c65dcb5d9028ab0a7a269f8756700f32f65171ac4b67547aed6283894b2303a43a07
-
SSDEEP
1536:r55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:XMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-