General
-
Target
2024-11-17_b35305481455316413ef770e60277b60_gandcrab
-
Size
83KB
-
Sample
241117-kadb2svmaz
-
MD5
b35305481455316413ef770e60277b60
-
SHA1
03329094c9e813ea07f669d68c9b5edf8a5c7744
-
SHA256
a0022cc12c0c780292359a59fe9c9fc85cbc040ac2bc18b21e829241052df6f1
-
SHA512
0460160ecf12340c5bf17d71bf682dae28202b45aae6215495b1d72a3c8459de24499b85af8e0024f10b9233a726807f3e511cc3ccc467424beec04eb678f56a
-
SSDEEP
1536:Y55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:6MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Behavioral task
behavioral1
Sample
2024-11-17_b35305481455316413ef770e60277b60_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-11-17_b35305481455316413ef770e60277b60_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-17_b35305481455316413ef770e60277b60_gandcrab
-
Size
83KB
-
MD5
b35305481455316413ef770e60277b60
-
SHA1
03329094c9e813ea07f669d68c9b5edf8a5c7744
-
SHA256
a0022cc12c0c780292359a59fe9c9fc85cbc040ac2bc18b21e829241052df6f1
-
SHA512
0460160ecf12340c5bf17d71bf682dae28202b45aae6215495b1d72a3c8459de24499b85af8e0024f10b9233a726807f3e511cc3ccc467424beec04eb678f56a
-
SSDEEP
1536:Y55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:6MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-