General
-
Target
20240520b8daddb22a914fc0bf62212e358b1b3bgandcrab_NeikiAnalytics
-
Size
83KB
-
Sample
240521-j5mzasec2v
-
MD5
b8daddb22a914fc0bf62212e358b1b3b
-
SHA1
034f34b058f4a0fdb188d1305182d3278aade4a2
-
SHA256
a2ebd28e8cfd31129a74ea835c100741e9be0bbdcf7460c99d595a0898aafa65
-
SHA512
b08845fda70ea426ff357f1efb5637531dcee0f6bb8a38a4c1780d822189f14e96d235c88b9114a5a9cd6b227fd9504198804b826608a5d8c85f963eee329648
-
SSDEEP
1536:255u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:8MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Behavioral task
behavioral1
Sample
20240520b8daddb22a914fc0bf62212e358b1b3bgandcrab_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20240520b8daddb22a914fc0bf62212e358b1b3bgandcrab_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
20240520b8daddb22a914fc0bf62212e358b1b3bgandcrab_NeikiAnalytics
-
Size
83KB
-
MD5
b8daddb22a914fc0bf62212e358b1b3b
-
SHA1
034f34b058f4a0fdb188d1305182d3278aade4a2
-
SHA256
a2ebd28e8cfd31129a74ea835c100741e9be0bbdcf7460c99d595a0898aafa65
-
SHA512
b08845fda70ea426ff357f1efb5637531dcee0f6bb8a38a4c1780d822189f14e96d235c88b9114a5a9cd6b227fd9504198804b826608a5d8c85f963eee329648
-
SSDEEP
1536:255u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:8MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-