General
-
Target
2024-11-03_e7f444f141c349c95a811db05dfc8735_gandcrab
-
Size
76KB
-
Sample
241103-kbc3nssmdq
-
MD5
e7f444f141c349c95a811db05dfc8735
-
SHA1
afc1a7cc898a27cb1c4f497f40537ef6962663fb
-
SHA256
4678fb36dfe0cc43f7e73667a8d169ee031c4808b0dc08b5a64d346a4f094342
-
SHA512
035ccf903b2a30e74970dc39cedd6fe99f0095671867a538a4a2d225817305e0a03cc9721d9685afba019ab60069fdb2ee1951f1e2a49a6466880a7ab3a7b3d7
-
SSDEEP
1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Behavioral task
behavioral1
Sample
2024-11-03_e7f444f141c349c95a811db05dfc8735_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-03_e7f444f141c349c95a811db05dfc8735_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-03_e7f444f141c349c95a811db05dfc8735_gandcrab
-
Size
76KB
-
MD5
e7f444f141c349c95a811db05dfc8735
-
SHA1
afc1a7cc898a27cb1c4f497f40537ef6962663fb
-
SHA256
4678fb36dfe0cc43f7e73667a8d169ee031c4808b0dc08b5a64d346a4f094342
-
SHA512
035ccf903b2a30e74970dc39cedd6fe99f0095671867a538a4a2d225817305e0a03cc9721d9685afba019ab60069fdb2ee1951f1e2a49a6466880a7ab3a7b3d7
-
SSDEEP
1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-