General
-
Target
2024-11-07_d3ce9e81e2d8d627fab866b39aaac6dc_gandcrab
-
Size
76KB
-
Sample
241107-kekxpa1qdr
-
MD5
d3ce9e81e2d8d627fab866b39aaac6dc
-
SHA1
00da578604e7fc252f62b1a310062f7aa71d1d54
-
SHA256
be970d34bcc37c176e41e0a8d2f2802110e1229aaa7ecfcc2dbdc7dafbdb0bf3
-
SHA512
7302b3d8035116aa51e8aded5bd9d88a56f6270019157dd476a04328f6d019773b38bc39564492d049afd72feffbbd0c72bf5d2e9a0fceca7934c9c2b9e4c1df
-
SSDEEP
1536:o55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:qMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Behavioral task
behavioral1
Sample
2024-11-07_d3ce9e81e2d8d627fab866b39aaac6dc_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-07_d3ce9e81e2d8d627fab866b39aaac6dc_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-07_d3ce9e81e2d8d627fab866b39aaac6dc_gandcrab
-
Size
76KB
-
MD5
d3ce9e81e2d8d627fab866b39aaac6dc
-
SHA1
00da578604e7fc252f62b1a310062f7aa71d1d54
-
SHA256
be970d34bcc37c176e41e0a8d2f2802110e1229aaa7ecfcc2dbdc7dafbdb0bf3
-
SHA512
7302b3d8035116aa51e8aded5bd9d88a56f6270019157dd476a04328f6d019773b38bc39564492d049afd72feffbbd0c72bf5d2e9a0fceca7934c9c2b9e4c1df
-
SSDEEP
1536:o55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:qMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-