General
-
Target
2024-10-22_ab2bfc36f1ff8ec54137ccfcd2c1b2ea_gandcrab
-
Size
76KB
-
Sample
241022-ev2mgsyflj
-
MD5
ab2bfc36f1ff8ec54137ccfcd2c1b2ea
-
SHA1
5ff39967755340acd2cffd6981a518ba0cff693b
-
SHA256
6358b690ffb64156f8c3cbcec6afad59a764295856739f832a78f973cf531d6f
-
SHA512
76de9e59089aa8e8e9dc699112590f8728e4746ba90ced552e3c309acb872060018c37a6261b739b2e33a4defd1390850ca3b65c40ad9fd49ff797fb2583fa6a
-
SSDEEP
1536:m55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:MMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Behavioral task
behavioral1
Sample
2024-10-22_ab2bfc36f1ff8ec54137ccfcd2c1b2ea_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-22_ab2bfc36f1ff8ec54137ccfcd2c1b2ea_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-10-22_ab2bfc36f1ff8ec54137ccfcd2c1b2ea_gandcrab
-
Size
76KB
-
MD5
ab2bfc36f1ff8ec54137ccfcd2c1b2ea
-
SHA1
5ff39967755340acd2cffd6981a518ba0cff693b
-
SHA256
6358b690ffb64156f8c3cbcec6afad59a764295856739f832a78f973cf531d6f
-
SHA512
76de9e59089aa8e8e9dc699112590f8728e4746ba90ced552e3c309acb872060018c37a6261b739b2e33a4defd1390850ca3b65c40ad9fd49ff797fb2583fa6a
-
SSDEEP
1536:m55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:MMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-