General
-
Target
2024-10-18_ed715b29158b906af4ff214f7e14d7a3_gandcrab
-
Size
73KB
-
Sample
241018-evcclazbrn
-
MD5
ed715b29158b906af4ff214f7e14d7a3
-
SHA1
f620278b81ca2ceb55df53aa65d8febaf6d33299
-
SHA256
3739ce3465fe26f123092de0e20586fb8b9a02510401abd8275f62649e123ca3
-
SHA512
aa73759cf7436f1a664c70a31a4785de61361c40adaf72cd2d8c7b9d8384f0299d7534090a9fb8e6e3fd3063b1f9984d469718a5ed2d045ea8ad8e1774aa9468
-
SSDEEP
1536:I55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:KMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-10-18_ed715b29158b906af4ff214f7e14d7a3_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-18_ed715b29158b906af4ff214f7e14d7a3_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-10-18_ed715b29158b906af4ff214f7e14d7a3_gandcrab
-
Size
73KB
-
MD5
ed715b29158b906af4ff214f7e14d7a3
-
SHA1
f620278b81ca2ceb55df53aa65d8febaf6d33299
-
SHA256
3739ce3465fe26f123092de0e20586fb8b9a02510401abd8275f62649e123ca3
-
SHA512
aa73759cf7436f1a664c70a31a4785de61361c40adaf72cd2d8c7b9d8384f0299d7534090a9fb8e6e3fd3063b1f9984d469718a5ed2d045ea8ad8e1774aa9468
-
SSDEEP
1536:I55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:KMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-