General
- Target 2024-04-04_675f5cb75497443ad398d0481f9f72e4_gandcrab
- Size 73KB
- Sample240404-pt2wzagc87
- SHA256 661fecee662cf012d4f4ecac126dba1ff047410c32675bd15fcfd66bd089cffc
- MD5 675f5cb75497443ad398d0481f9f72e4
- SHA1 5aed23f99465d4d66a3423c5ef8412f0cdcc1fe8
- SHA512 fb758c71325c3bb13d13c3186d89e8bdfad248d9a993631fb8390636db574cf97ce29310ca0d7963cabdfbf0d82312356c21cf0ef1febb73b0225a312502a629
- SSDEEP 1536:d55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:VMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-04-04_675f5cb75497443ad398d0481f9f72e4_gandcrab.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-04-04_675f5cb75497443ad398d0481f9f72e4_gandcrab.exe
Resource
win10v2004-20240226-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
gandcrab
C2
-
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
- Target 2024-04-04_675f5cb75497443ad398d0481f9f72e4_gandcrab
- Size 73KB
- SHA256 661fecee662cf012d4f4ecac126dba1ff047410c32675bd15fcfd66bd089cffc
- MD5 675f5cb75497443ad398d0481f9f72e4
- SHA1 5aed23f99465d4d66a3423c5ef8412f0cdcc1fe8
- SHA512 fb758c71325c3bb13d13c3186d89e8bdfad248d9a993631fb8390636db574cf97ce29310ca0d7963cabdfbf0d82312356c21cf0ef1febb73b0225a312502a629
- SSDEEP 1536:d55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:VMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.