General
-
Target
2024-10-24_2ff9215bf57ecb8e4b945eba9d5e55bd_gandcrab
-
Size
73KB
-
Sample
241024-lh1b8a1fkd
-
MD5
2ff9215bf57ecb8e4b945eba9d5e55bd
-
SHA1
4baf5e6744f661db69a89f77a9b4455055439604
-
SHA256
e32dd34abc19a349576c87533742bf199b9c54fd7953aa71599e721761245314
-
SHA512
4e4e011f4b9d7bd8ac179bb45f988589cdde322ec47eceb96e9c69ed23561292f93339f9d07c3ed6e9a607f63d781e7ed6b06a6e7e94bad3851b5f2104293349
-
SSDEEP
1536:E555555555555pmgSeGDjtQhnwmmB0yIZqMqqU+2bbbAV2/S2mr3IdE8mne0Avu8:hMSjOnrmBJMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-10-24_2ff9215bf57ecb8e4b945eba9d5e55bd_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-24_2ff9215bf57ecb8e4b945eba9d5e55bd_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-10-24_2ff9215bf57ecb8e4b945eba9d5e55bd_gandcrab
-
Size
73KB
-
MD5
2ff9215bf57ecb8e4b945eba9d5e55bd
-
SHA1
4baf5e6744f661db69a89f77a9b4455055439604
-
SHA256
e32dd34abc19a349576c87533742bf199b9c54fd7953aa71599e721761245314
-
SHA512
4e4e011f4b9d7bd8ac179bb45f988589cdde322ec47eceb96e9c69ed23561292f93339f9d07c3ed6e9a607f63d781e7ed6b06a6e7e94bad3851b5f2104293349
-
SSDEEP
1536:E555555555555pmgSeGDjtQhnwmmB0yIZqMqqU+2bbbAV2/S2mr3IdE8mne0Avu8:hMSjOnrmBJMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-