General
-
Target
2024-05-26_2efd4dc5dfc71aade92768936f283ef4_gandcrab
-
Size
73KB
-
Sample
240526-h89rssbc2y
-
MD5
2efd4dc5dfc71aade92768936f283ef4
-
SHA1
b37e56e31cc0f78041befd336224ac86de7969f8
-
SHA256
cfa3e0840fe120fb6dfbb24da4710fd95a6300df13fbb6ee865c2f4160459465
-
SHA512
f9351ec4abc277afa3a88b08b341f9c97046fa1f98e149f52eb766c786f27fd601943a30438a7e28315a6b3d8c3dbe29dff2caf1cec04ca13254f26d843e6abd
-
SSDEEP
1536:d555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0AvuN:aMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj
Behavioral task
behavioral1
Sample
2024-05-26_2efd4dc5dfc71aade92768936f283ef4_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-26_2efd4dc5dfc71aade92768936f283ef4_gandcrab.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-05-26_2efd4dc5dfc71aade92768936f283ef4_gandcrab
-
Size
73KB
-
MD5
2efd4dc5dfc71aade92768936f283ef4
-
SHA1
b37e56e31cc0f78041befd336224ac86de7969f8
-
SHA256
cfa3e0840fe120fb6dfbb24da4710fd95a6300df13fbb6ee865c2f4160459465
-
SHA512
f9351ec4abc277afa3a88b08b341f9c97046fa1f98e149f52eb766c786f27fd601943a30438a7e28315a6b3d8c3dbe29dff2caf1cec04ca13254f26d843e6abd
-
SSDEEP
1536:d555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0AvuN:aMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-