General
-
Target
2024-11-01_f9e3752ddfa130480bd94af3afbd6585_gandcrab
-
Size
73KB
-
Sample
241101-hcdpgszkbk
-
MD5
f9e3752ddfa130480bd94af3afbd6585
-
SHA1
f360fadf038bdf051d82560d0ebf477d39b2d9db
-
SHA256
4869a44a913c8a2e9eb7b56b9909eeac69971921c264488dbc5e390cb6eae6b5
-
SHA512
60181a5482ead07957332550e3a5793a2365aec70c1cac87e96c4a04c959c46ba5c94780428b3ca22589dab1f0ad2c75747ec0451dd9ca7d1b744ecf1c1e9249
-
SSDEEP
1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2024-11-01_f9e3752ddfa130480bd94af3afbd6585_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-01_f9e3752ddfa130480bd94af3afbd6585_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-01_f9e3752ddfa130480bd94af3afbd6585_gandcrab
-
Size
73KB
-
MD5
f9e3752ddfa130480bd94af3afbd6585
-
SHA1
f360fadf038bdf051d82560d0ebf477d39b2d9db
-
SHA256
4869a44a913c8a2e9eb7b56b9909eeac69971921c264488dbc5e390cb6eae6b5
-
SHA512
60181a5482ead07957332550e3a5793a2365aec70c1cac87e96c4a04c959c46ba5c94780428b3ca22589dab1f0ad2c75747ec0451dd9ca7d1b744ecf1c1e9249
-
SSDEEP
1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-