General
-
Target
2024-10-08_e27e962fd96ba03e8c22777cd47319f5_gandcrab
-
Size
73KB
-
Sample
241008-scxgpswanb
-
MD5
e27e962fd96ba03e8c22777cd47319f5
-
SHA1
9c18758ce132ccdda20ca410f55aa315c2922690
-
SHA256
01115ebfe5600f4dd65b0e3eb00262b05f3a5f3f0d7ef674670075dc4ba86a24
-
SHA512
f3bf3e1cf87e0364fac0a21eabc4c9150d4c8dd9c093e4f0ad54b8856997440c4ccaa5e9438ed01fcd9c35bc47876247b5bf3a4f7b9bbbbb8f1cd8d290de086c
-
SSDEEP
1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-10-08_e27e962fd96ba03e8c22777cd47319f5_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-08_e27e962fd96ba03e8c22777cd47319f5_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-10-08_e27e962fd96ba03e8c22777cd47319f5_gandcrab
-
Size
73KB
-
MD5
e27e962fd96ba03e8c22777cd47319f5
-
SHA1
9c18758ce132ccdda20ca410f55aa315c2922690
-
SHA256
01115ebfe5600f4dd65b0e3eb00262b05f3a5f3f0d7ef674670075dc4ba86a24
-
SHA512
f3bf3e1cf87e0364fac0a21eabc4c9150d4c8dd9c093e4f0ad54b8856997440c4ccaa5e9438ed01fcd9c35bc47876247b5bf3a4f7b9bbbbb8f1cd8d290de086c
-
SSDEEP
1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-