General
-
Target
2024-11-14_56c2b5f8950128df42f43c6ab7c64ed1_gandcrab
-
Size
73KB
-
Sample
241114-nml2hasleq
-
MD5
56c2b5f8950128df42f43c6ab7c64ed1
-
SHA1
d79d69eb36bd10ef79fae37cb254762678f1f0b4
-
SHA256
761c38173e8b8d3902a607b755893ae991ca81446870fd8d28a0d16727e69a5a
-
SHA512
59a437b094e20acff9ec48dbdde3904b9ef3d013c584839367aebc7488129aa669006bee861820a13123e85cfc8b2e2cbedbafaeb83b1620bed25551b8be4aac
-
SSDEEP
1536:+55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:UMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2024-11-14_56c2b5f8950128df42f43c6ab7c64ed1_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-14_56c2b5f8950128df42f43c6ab7c64ed1_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-14_56c2b5f8950128df42f43c6ab7c64ed1_gandcrab
-
Size
73KB
-
MD5
56c2b5f8950128df42f43c6ab7c64ed1
-
SHA1
d79d69eb36bd10ef79fae37cb254762678f1f0b4
-
SHA256
761c38173e8b8d3902a607b755893ae991ca81446870fd8d28a0d16727e69a5a
-
SHA512
59a437b094e20acff9ec48dbdde3904b9ef3d013c584839367aebc7488129aa669006bee861820a13123e85cfc8b2e2cbedbafaeb83b1620bed25551b8be4aac
-
SSDEEP
1536:+55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:UMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-