General
-
Target
2024-10-31_d7e3fb59b4936d169d1b1f3118cdfc9b_gandcrab
-
Size
73KB
-
Sample
241031-fbj4rs1rem
-
MD5
d7e3fb59b4936d169d1b1f3118cdfc9b
-
SHA1
2b958b506b101231931bed7fdbba11d0b89d1257
-
SHA256
c6190f1c760dc9d5267c2551f12dec8d708edcfc6a649f5a328f1c0d399f25fe
-
SHA512
6f892e160cd01c960e82116ae03cce29233aa4a7fd294c7d339fe32bd8652dc042e903262c2d08a7b2c59065fb08a1e0ddd1cf5345ffe1a5729cd595ca2908ae
-
SSDEEP
1536:l555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:iMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-10-31_d7e3fb59b4936d169d1b1f3118cdfc9b_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-31_d7e3fb59b4936d169d1b1f3118cdfc9b_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-10-31_d7e3fb59b4936d169d1b1f3118cdfc9b_gandcrab
-
Size
73KB
-
MD5
d7e3fb59b4936d169d1b1f3118cdfc9b
-
SHA1
2b958b506b101231931bed7fdbba11d0b89d1257
-
SHA256
c6190f1c760dc9d5267c2551f12dec8d708edcfc6a649f5a328f1c0d399f25fe
-
SHA512
6f892e160cd01c960e82116ae03cce29233aa4a7fd294c7d339fe32bd8652dc042e903262c2d08a7b2c59065fb08a1e0ddd1cf5345ffe1a5729cd595ca2908ae
-
SSDEEP
1536:l555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:iMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-