General
-
Target
2024-03-28_4f8a5e61b098267df58cde721d1e48d0_gandcrab
-
Size
73KB
-
Sample
240328-zefejaga4t
-
MD5
4f8a5e61b098267df58cde721d1e48d0
-
SHA1
f88d67ffa35a13fc75cd40ca64b0c2e12209d787
-
SHA256
2de3068589031d6ee1839012e740d2b4c5d9a8e27e0b6a60d0f24cdd1e3f45a9
-
SHA512
f17f2782c6e0ee76fd9a979eea7f1018915a36bc8ce2074b5fedda62c44813f6f96aab1f47292adab11dc045c481599cd6d11497b911a267b8883e882223e696
-
SSDEEP
1536:r555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:sMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-03-28_4f8a5e61b098267df58cde721d1e48d0_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-28_4f8a5e61b098267df58cde721d1e48d0_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-03-28_4f8a5e61b098267df58cde721d1e48d0_gandcrab
-
Size
73KB
-
MD5
4f8a5e61b098267df58cde721d1e48d0
-
SHA1
f88d67ffa35a13fc75cd40ca64b0c2e12209d787
-
SHA256
2de3068589031d6ee1839012e740d2b4c5d9a8e27e0b6a60d0f24cdd1e3f45a9
-
SHA512
f17f2782c6e0ee76fd9a979eea7f1018915a36bc8ce2074b5fedda62c44813f6f96aab1f47292adab11dc045c481599cd6d11497b911a267b8883e882223e696
-
SSDEEP
1536:r555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:sMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-