General
-
Target
2024-03-31_9ec4baaedeee46e48b36667e58d787e3_gandcrab
-
Size
145KB
-
Sample
240331-xda3bahe82
-
MD5
9ec4baaedeee46e48b36667e58d787e3
-
SHA1
3f5a4ffc16f2e19b5622f942454186148872a618
-
SHA256
50fdff35926eb20ff16c42b2e76cbc6c1d4ccc0325dccce4abf256c641311d09
-
SHA512
89e4ec75aa58963470dac9ba7253cf13749e404eb8ab766888efd3b457615534717634994ba749bc7c5422ab480f4f6173b6be65273bd7a3ca09a0aa4156fef8
-
SSDEEP
3072:1YHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:1yOqqDL64vdGREz
Behavioral task
behavioral1
Sample
2024-03-31_9ec4baaedeee46e48b36667e58d787e3_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-31_9ec4baaedeee46e48b36667e58d787e3_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-31_9ec4baaedeee46e48b36667e58d787e3_gandcrab
-
Size
145KB
-
MD5
9ec4baaedeee46e48b36667e58d787e3
-
SHA1
3f5a4ffc16f2e19b5622f942454186148872a618
-
SHA256
50fdff35926eb20ff16c42b2e76cbc6c1d4ccc0325dccce4abf256c641311d09
-
SHA512
89e4ec75aa58963470dac9ba7253cf13749e404eb8ab766888efd3b457615534717634994ba749bc7c5422ab480f4f6173b6be65273bd7a3ca09a0aa4156fef8
-
SSDEEP
3072:1YHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:1yOqqDL64vdGREz
Score10/10-
GandCrab payload
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-