General
- Target 2024-03-28_b6e650e0dcb42921a8fc73fdc44fe9b4_gandcrab
- Size 73KB
- Sample240328-a474eacb6v
- SHA256 154f4ae405ba67ee0d6367c299542c1c2666427c6f5f2801cf09c30353383eee
- MD5 b6e650e0dcb42921a8fc73fdc44fe9b4
- SHA1 f87b923c482e421f0052e0fd362a807cd08fdd0c
- SHA512 aa8b423f61f2622f2ff7b1807dae5df28e8bed3bb25b46d00313865366adf33443e4200d717ef86a75801787413f421d61b64f3c6f8bc612de86183753c58dd5
- SSDEEP 1536:r555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:sMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-03-28_b6e650e0dcb42921a8fc73fdc44fe9b4_gandcrab.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-03-28_b6e650e0dcb42921a8fc73fdc44fe9b4_gandcrab.exe
Resource
win10v2004-20240226-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
gandcrab
C2
-
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
- Target 2024-03-28_b6e650e0dcb42921a8fc73fdc44fe9b4_gandcrab
- Size 73KB
- SHA256 154f4ae405ba67ee0d6367c299542c1c2666427c6f5f2801cf09c30353383eee
- MD5 b6e650e0dcb42921a8fc73fdc44fe9b4
- SHA1 f87b923c482e421f0052e0fd362a807cd08fdd0c
- SHA512 aa8b423f61f2622f2ff7b1807dae5df28e8bed3bb25b46d00313865366adf33443e4200d717ef86a75801787413f421d61b64f3c6f8bc612de86183753c58dd5
- SSDEEP 1536:r555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:sMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h
- MD5 SHA1 SHA512 SSDEEP
Score6/10Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.