Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-29_e411bdcfd344f589197a328ec635c5cf_gandcrab
-
Size
73KB
-
Sample
240429-eg2qbshf7v
-
MD5
e411bdcfd344f589197a328ec635c5cf
-
SHA1
e533ced64cfd15e7e9be6c9c88d4e5a93e9c4657
-
SHA256
e093c09ad4ec818d84f474ae57fff7c16b502666810e17381ad521c000ddc0c6
-
SHA512
880d3e1e7bc8d30070fa535aef5e3707fc83c1aab5a090df5ad36e34bd1621d93602cb490c90db09ef7e5e47fa0268ef21fb0cf2dbe901ccc41ac39ccb30d11a
-
SSDEEP
1536:3555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:YMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-04-29_e411bdcfd344f589197a328ec635c5cf_gandcrab.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-29_e411bdcfd344f589197a328ec635c5cf_gandcrab.exe
Resource
win10v2004-20240419-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-04-29_e411bdcfd344f589197a328ec635c5cf_gandcrab
-
Size
73KB
-
MD5
e411bdcfd344f589197a328ec635c5cf
-
SHA1
e533ced64cfd15e7e9be6c9c88d4e5a93e9c4657
-
SHA256
e093c09ad4ec818d84f474ae57fff7c16b502666810e17381ad521c000ddc0c6
-
SHA512
880d3e1e7bc8d30070fa535aef5e3707fc83c1aab5a090df5ad36e34bd1621d93602cb490c90db09ef7e5e47fa0268ef21fb0cf2dbe901ccc41ac39ccb30d11a
-
SSDEEP
1536:3555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:YMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-