General
-
Target
2024-07-11_5d90bce49833d0067d20af944755ebdd_gandcrab
-
Size
167KB
-
Sample
240711-flrllazfln
-
MD5
5d90bce49833d0067d20af944755ebdd
-
SHA1
9d3a241798a876c17781017441272ace62428a01
-
SHA256
1b9ce5f7d78b47815109f0b367a3e04881aba39ac258d5debc0a7c11f6200cd1
-
SHA512
c6be034f204fda3bfa83a39d38ae9f2176fa081209865bdabfb48374ed9d455f823b4266231165117e58ccfbfea6f622f062d2315815ce332340a0710c9f2089
-
SSDEEP
3072:/YHVHd2NFMqqDL2/mr3IdE8we0Avu5r++ygLIaa4jRv9OtNZped:/yZqqDL6oREzZpK
Behavioral task
behavioral1
Sample
2024-07-11_5d90bce49833d0067d20af944755ebdd_gandcrab.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-07-11_5d90bce49833d0067d20af944755ebdd_gandcrab.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2024-07-11_5d90bce49833d0067d20af944755ebdd_gandcrab
-
Size
167KB
-
MD5
5d90bce49833d0067d20af944755ebdd
-
SHA1
9d3a241798a876c17781017441272ace62428a01
-
SHA256
1b9ce5f7d78b47815109f0b367a3e04881aba39ac258d5debc0a7c11f6200cd1
-
SHA512
c6be034f204fda3bfa83a39d38ae9f2176fa081209865bdabfb48374ed9d455f823b4266231165117e58ccfbfea6f622f062d2315815ce332340a0710c9f2089
-
SSDEEP
3072:/YHVHd2NFMqqDL2/mr3IdE8we0Avu5r++ygLIaa4jRv9OtNZped:/yZqqDL6oREzZpK
Score10/10-
GandCrab payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-