General
-
Target
2024-04-18_92c70b1538850c8b7eedc841e00c5f01_gandcrab
-
Size
83KB
-
Sample
240418-jpmctsge9x
-
MD5
92c70b1538850c8b7eedc841e00c5f01
-
SHA1
3433399a021fe7c61a8d79ca00b1528d35a0364a
-
SHA256
998f78c6bb2139ef1d0607f1e66db806066dce2020aeb49a21b8f37c61703b10
-
SHA512
0b30c46e259c07c122535c49e237c0deb8281a19bac138cb012abaee93554688159867004fb36d240081fc5369a89582cd3071ded6e0e84971c6bbb15673cf5b
-
SSDEEP
1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Behavioral task
behavioral1
Sample
2024-04-18_92c70b1538850c8b7eedc841e00c5f01_gandcrab.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-18_92c70b1538850c8b7eedc841e00c5f01_gandcrab.exe
Resource
win10v2004-20240412-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-04-18_92c70b1538850c8b7eedc841e00c5f01_gandcrab
-
Size
83KB
-
MD5
92c70b1538850c8b7eedc841e00c5f01
-
SHA1
3433399a021fe7c61a8d79ca00b1528d35a0364a
-
SHA256
998f78c6bb2139ef1d0607f1e66db806066dce2020aeb49a21b8f37c61703b10
-
SHA512
0b30c46e259c07c122535c49e237c0deb8281a19bac138cb012abaee93554688159867004fb36d240081fc5369a89582cd3071ded6e0e84971c6bbb15673cf5b
-
SSDEEP
1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-