Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-04_ed7c2d205ca6403cc7b62b2060047ad8_gandcrab
-
Size
88KB
-
Sample
240404-2kw1kscc2t
-
MD5
ed7c2d205ca6403cc7b62b2060047ad8
-
SHA1
74d60325c5b1a3cafaad4136f8ee8c6bfe7a2994
-
SHA256
26e2b02a8626327e924c9f35877a898336d7842f9acab6bbbbb6fba89745101f
-
SHA512
14a4fe65369298fc560f5cf157ed396ec6bae1aec00b91a506526c8cc819f64b3949962332e3eb418bed5a61a06e28767bb095a49d2c2216a3096997c48e3aa0
-
SSDEEP
1536:HrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:HjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g
Behavioral task
behavioral1
Sample
2024-04-04_ed7c2d205ca6403cc7b62b2060047ad8_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-04_ed7c2d205ca6403cc7b62b2060047ad8_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-04-04_ed7c2d205ca6403cc7b62b2060047ad8_gandcrab
-
Size
88KB
-
MD5
ed7c2d205ca6403cc7b62b2060047ad8
-
SHA1
74d60325c5b1a3cafaad4136f8ee8c6bfe7a2994
-
SHA256
26e2b02a8626327e924c9f35877a898336d7842f9acab6bbbbb6fba89745101f
-
SHA512
14a4fe65369298fc560f5cf157ed396ec6bae1aec00b91a506526c8cc819f64b3949962332e3eb418bed5a61a06e28767bb095a49d2c2216a3096997c48e3aa0
-
SSDEEP
1536:HrsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:HjDX9pwzMqqDL2/mr3IdE8we0Avu5r+g
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-