General
-
Target
2024-03-28_dff86f091dd00bad66578017b7ae3fb3_gandcrab
-
Size
145KB
-
Sample
240328-radfdafh5z
-
MD5
dff86f091dd00bad66578017b7ae3fb3
-
SHA1
5380fb1bdc4bd969b717e3c4e71e576f2fe74b7c
-
SHA256
3a19c6cec66e6b2732e0dd3fb5d548e84e8da1ff1b1203f5605665b6ca113ed7
-
SHA512
b037d354deb4f447afb4c8e00de29adf1477fcd4e9b1c7f7d5d3f4c01e4724e16e1d8c92aafe56d52ecd50952f34a94502bbceab69fd4609cd820b6389586ae6
-
SSDEEP
3072:xYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:xyOqqDL64vdGREz
Behavioral task
behavioral1
Sample
2024-03-28_dff86f091dd00bad66578017b7ae3fb3_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-28_dff86f091dd00bad66578017b7ae3fb3_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-28_dff86f091dd00bad66578017b7ae3fb3_gandcrab
-
Size
145KB
-
MD5
dff86f091dd00bad66578017b7ae3fb3
-
SHA1
5380fb1bdc4bd969b717e3c4e71e576f2fe74b7c
-
SHA256
3a19c6cec66e6b2732e0dd3fb5d548e84e8da1ff1b1203f5605665b6ca113ed7
-
SHA512
b037d354deb4f447afb4c8e00de29adf1477fcd4e9b1c7f7d5d3f4c01e4724e16e1d8c92aafe56d52ecd50952f34a94502bbceab69fd4609cd820b6389586ae6
-
SSDEEP
3072:xYHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:xyOqqDL64vdGREz
Score10/10-
GandCrab payload
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-