General
- Target 2024-06-13_95e4cc217258344cd07e2fecf49c5067_gandcrab
- Size 74KB
- Sample240613-b2ejratarp
- SHA256 50826e3380ab96f2c94908267b10817c91a94d07a28570edd0b3570c0bf31495
- MD5 95e4cc217258344cd07e2fecf49c5067
- SHA1 2bf7fa4b2da943c8babfd4dd764785cc0a6fe91d
- SHA512 f9473d25ce0c4be4989a440711b196d3c3c5a31e991261210a54ed449e6606894a23f76bec533958ebfc4c48a984c1fa7ff2a6c9b26b524d399699d35b4df842
- SSDEEP 1536:N55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:lMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-13_95e4cc217258344cd07e2fecf49c5067_gandcrab.exe
Resource
win7-20240611-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-13_95e4cc217258344cd07e2fecf49c5067_gandcrab.exe
Resource
win10v2004-20240611-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
gandcrab
C2
-
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
- Target 2024-06-13_95e4cc217258344cd07e2fecf49c5067_gandcrab
- Size 74KB
- SHA256 50826e3380ab96f2c94908267b10817c91a94d07a28570edd0b3570c0bf31495
- MD5 95e4cc217258344cd07e2fecf49c5067
- SHA1 2bf7fa4b2da943c8babfd4dd764785cc0a6fe91d
- SHA512 f9473d25ce0c4be4989a440711b196d3c3c5a31e991261210a54ed449e6606894a23f76bec533958ebfc4c48a984c1fa7ff2a6c9b26b524d399699d35b4df842
- SSDEEP 1536:N55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:lMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.