General
-
Target
2024-05-25_70afc663a3c9f8d9b36d77ae88b00a9b_gandcrab
-
Size
73KB
-
Sample
240525-e5q9haef43
-
MD5
70afc663a3c9f8d9b36d77ae88b00a9b
-
SHA1
59e28ae0a69b0ab570f1b9e6daacec84684a8826
-
SHA256
b3bda4ecf6d9e5619662c6e876a57895abd76162bddc2a9d6dd97cdaf29c45ea
-
SHA512
11429b74380fc6be8b82631b2788d90c24836031aaa490a6744604013380772c53bcbbc91d8a1e61c9030810052474f2e7299ec67da60737baaed52a0f3b2aeb
-
SSDEEP
1536:i555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avuo:zMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj
Behavioral task
behavioral1
Sample
2024-05-25_70afc663a3c9f8d9b36d77ae88b00a9b_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-25_70afc663a3c9f8d9b36d77ae88b00a9b_gandcrab.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-05-25_70afc663a3c9f8d9b36d77ae88b00a9b_gandcrab
-
Size
73KB
-
MD5
70afc663a3c9f8d9b36d77ae88b00a9b
-
SHA1
59e28ae0a69b0ab570f1b9e6daacec84684a8826
-
SHA256
b3bda4ecf6d9e5619662c6e876a57895abd76162bddc2a9d6dd97cdaf29c45ea
-
SHA512
11429b74380fc6be8b82631b2788d90c24836031aaa490a6744604013380772c53bcbbc91d8a1e61c9030810052474f2e7299ec67da60737baaed52a0f3b2aeb
-
SSDEEP
1536:i555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avuo:zMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-