General
-
Target
2024-11-10_f048ca32aa97fad0d344a7f1d3f26f2e_gandcrab
-
Size
76KB
-
Sample
241110-e3v5nszbrr
-
MD5
f048ca32aa97fad0d344a7f1d3f26f2e
-
SHA1
ac8aa9806dbec90f1e3e30dec5d370f95025c28d
-
SHA256
afb7bfdf2728d33d0d227f838d8abf99122c607a585e987cdc95abc846ad86b0
-
SHA512
53e7fc3f79ddf963992e3b55953c3f6a5e49f67dcf67ba4c42a04540fa7da0de65f459544a41ad7e34696089459c03c904e3e2493f5bd017316f5d6e9421b4a6
-
SSDEEP
1536:D55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:fMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Behavioral task
behavioral1
Sample
2024-11-10_f048ca32aa97fad0d344a7f1d3f26f2e_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-10_f048ca32aa97fad0d344a7f1d3f26f2e_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-10_f048ca32aa97fad0d344a7f1d3f26f2e_gandcrab
-
Size
76KB
-
MD5
f048ca32aa97fad0d344a7f1d3f26f2e
-
SHA1
ac8aa9806dbec90f1e3e30dec5d370f95025c28d
-
SHA256
afb7bfdf2728d33d0d227f838d8abf99122c607a585e987cdc95abc846ad86b0
-
SHA512
53e7fc3f79ddf963992e3b55953c3f6a5e49f67dcf67ba4c42a04540fa7da0de65f459544a41ad7e34696089459c03c904e3e2493f5bd017316f5d6e9421b4a6
-
SSDEEP
1536:D55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:fMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-