General
-
Target
20240929948c71a08ad1134c7a608ffae75e60ccgandcrab
-
Size
76KB
-
Sample
240929-spvhwazakk
-
MD5
948c71a08ad1134c7a608ffae75e60cc
-
SHA1
47447e2d307d245377e355524f95f745b27796e3
-
SHA256
28b4350c3fc652e5af6ab71e55d3087227edc5ec359f8ff4dfe97fec93bb8726
-
SHA512
e4e2c9660d3003b58d908df33cd6f67112b7c401bc1f5f6ffb69d6a1b33abb60b5087586e3d2eb46ab50eb558a342445e3865e061e8475fdc17a902a21c6454c
-
SSDEEP
1536:Q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r/:iMSjOnrmBTMqqDL2/mr3IdE8we0Avu57
Behavioral task
behavioral1
Sample
20240929948c71a08ad1134c7a608ffae75e60ccgandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
20240929948c71a08ad1134c7a608ffae75e60ccgandcrab.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
20240929948c71a08ad1134c7a608ffae75e60ccgandcrab
-
Size
76KB
-
MD5
948c71a08ad1134c7a608ffae75e60cc
-
SHA1
47447e2d307d245377e355524f95f745b27796e3
-
SHA256
28b4350c3fc652e5af6ab71e55d3087227edc5ec359f8ff4dfe97fec93bb8726
-
SHA512
e4e2c9660d3003b58d908df33cd6f67112b7c401bc1f5f6ffb69d6a1b33abb60b5087586e3d2eb46ab50eb558a342445e3865e061e8475fdc17a902a21c6454c
-
SSDEEP
1536:Q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r/:iMSjOnrmBTMqqDL2/mr3IdE8we0Avu57
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-