General
-
Target
2024-11-01_0c25605439e0945c4aa7681f073c445c_gandcrab
-
Size
73KB
-
Sample
241101-h8lpzayckb
-
MD5
0c25605439e0945c4aa7681f073c445c
-
SHA1
309615d8776de631b55330104008afba98df02d0
-
SHA256
473731ec193c17bfb350daad5391f6882f0714e664c88e1dd34510dd0b371a78
-
SHA512
a7aec6fa97140c0aebed6864e10f09cbce7e434ead7dd39f92a9d36a9fe845315057b9453146eddf2efb06c025b699357b6d626bff79ad7cf2db00b72c2a2be5
-
SSDEEP
1536:s55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:OMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2024-11-01_0c25605439e0945c4aa7681f073c445c_gandcrab.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2024-11-01_0c25605439e0945c4aa7681f073c445c_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-01_0c25605439e0945c4aa7681f073c445c_gandcrab
-
Size
73KB
-
MD5
0c25605439e0945c4aa7681f073c445c
-
SHA1
309615d8776de631b55330104008afba98df02d0
-
SHA256
473731ec193c17bfb350daad5391f6882f0714e664c88e1dd34510dd0b371a78
-
SHA512
a7aec6fa97140c0aebed6864e10f09cbce7e434ead7dd39f92a9d36a9fe845315057b9453146eddf2efb06c025b699357b6d626bff79ad7cf2db00b72c2a2be5
-
SSDEEP
1536:s55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:OMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-