General
-
Target
2024-10-08_4c590256b1cee4cfc56fbc90c1ffb4db_gandcrab
-
Size
73KB
-
Sample
241008-tyrc9aydkb
-
MD5
4c590256b1cee4cfc56fbc90c1ffb4db
-
SHA1
02f512963cff785cc2aac6648f747c04d6fc5b97
-
SHA256
dcc119cffbd8d8d81266101e287553f43fd71d2f3f636868e3ac425c469ac73f
-
SHA512
d106b8d46e7d376279ab0e22257b8b597d3841aff3214debd4f07bfa139bb87854a55c60075dbdc11770976fb79e8c4045c32835677e4737ddefe9ca6ae81ec9
-
SSDEEP
1536:4555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:VMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-10-08_4c590256b1cee4cfc56fbc90c1ffb4db_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-08_4c590256b1cee4cfc56fbc90c1ffb4db_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-10-08_4c590256b1cee4cfc56fbc90c1ffb4db_gandcrab
-
Size
73KB
-
MD5
4c590256b1cee4cfc56fbc90c1ffb4db
-
SHA1
02f512963cff785cc2aac6648f747c04d6fc5b97
-
SHA256
dcc119cffbd8d8d81266101e287553f43fd71d2f3f636868e3ac425c469ac73f
-
SHA512
d106b8d46e7d376279ab0e22257b8b597d3841aff3214debd4f07bfa139bb87854a55c60075dbdc11770976fb79e8c4045c32835677e4737ddefe9ca6ae81ec9
-
SSDEEP
1536:4555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:VMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-