General
-
Target
2024-10-20_ff685495b8c655b4f9bff09eff80d2c2_gandcrab
-
Size
97KB
-
Sample
241020-exqb8sydqh
-
MD5
ff685495b8c655b4f9bff09eff80d2c2
-
SHA1
abaaa1c2c5d20622ff9439773c1051dd46e12fc6
-
SHA256
191b6ce5869ba02209fa7e700f4d8638a111f1f142410eb4b3a76da9875c881e
-
SHA512
85d6bca388edd6c2931d5dca0aa050fdc5e91c644289b0ef71a3bd0e6187710cb22005fe2fbcf4bf53c13af2b9e7f5c703cda01387c194c7f6b3217efde998d0
-
SSDEEP
1536:/ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:XBounVyFHkMqqDL2/LgHkctc
Behavioral task
behavioral1
Sample
2024-10-20_ff685495b8c655b4f9bff09eff80d2c2_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-20_ff685495b8c655b4f9bff09eff80d2c2_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-10-20_ff685495b8c655b4f9bff09eff80d2c2_gandcrab
-
Size
97KB
-
MD5
ff685495b8c655b4f9bff09eff80d2c2
-
SHA1
abaaa1c2c5d20622ff9439773c1051dd46e12fc6
-
SHA256
191b6ce5869ba02209fa7e700f4d8638a111f1f142410eb4b3a76da9875c881e
-
SHA512
85d6bca388edd6c2931d5dca0aa050fdc5e91c644289b0ef71a3bd0e6187710cb22005fe2fbcf4bf53c13af2b9e7f5c703cda01387c194c7f6b3217efde998d0
-
SSDEEP
1536:/ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAlMqqU+2bbbAV2/S2LNmHkf:XBounVyFHkMqqDL2/LgHkctc
-
GandCrab payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-