General
-
Target
2024-11-10_4788520e0e5645d8d234bd3059785481_gandcrab
-
Size
76KB
-
Sample
241110-e1dgvayqby
-
MD5
4788520e0e5645d8d234bd3059785481
-
SHA1
31c559371b8fa98b793d1e05379fcccdd76d306c
-
SHA256
79a72e1f0bb393a75a5508cd9e2dcb7551569c00bee9ec79969f312a3702a655
-
SHA512
b805555c9593aa56b432d361c92c3d77a6836782b7e539ef357f7b020c108a99c1d12955d6031bb1a67ee696520e9caef64e9ea69d75270cb04f72a81ea86e49
-
SSDEEP
1536:C55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:4MSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Behavioral task
behavioral1
Sample
2024-11-10_4788520e0e5645d8d234bd3059785481_gandcrab.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2024-11-10_4788520e0e5645d8d234bd3059785481_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-10_4788520e0e5645d8d234bd3059785481_gandcrab
-
Size
76KB
-
MD5
4788520e0e5645d8d234bd3059785481
-
SHA1
31c559371b8fa98b793d1e05379fcccdd76d306c
-
SHA256
79a72e1f0bb393a75a5508cd9e2dcb7551569c00bee9ec79969f312a3702a655
-
SHA512
b805555c9593aa56b432d361c92c3d77a6836782b7e539ef357f7b020c108a99c1d12955d6031bb1a67ee696520e9caef64e9ea69d75270cb04f72a81ea86e49
-
SSDEEP
1536:C55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:4MSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-