General
-
Target
2024-11-18_daa95dab39e01a1666af85b9e75f9e78_gandcrab
-
Size
83KB
-
Sample
241118-c1cjfa1mcl
-
MD5
daa95dab39e01a1666af85b9e75f9e78
-
SHA1
a7f7730c768e38f1735de29a11edb33d6e6c31b3
-
SHA256
57020a2a5fd26064050d958c1cb05217f6753d6422d9c39b08e6adaef076d73f
-
SHA512
be9bab0a24ae9129b3f1e37370ca584697c8e3a10ba21436b1ffdf24c3847bed27b800edfec73ec3c42ea705f5c9c296d145691c46562eca4638ccb029527b6c
-
SSDEEP
1536:255u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:8MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Behavioral task
behavioral1
Sample
2024-11-18_daa95dab39e01a1666af85b9e75f9e78_gandcrab.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2024-11-18_daa95dab39e01a1666af85b9e75f9e78_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-11-18_daa95dab39e01a1666af85b9e75f9e78_gandcrab
-
Size
83KB
-
MD5
daa95dab39e01a1666af85b9e75f9e78
-
SHA1
a7f7730c768e38f1735de29a11edb33d6e6c31b3
-
SHA256
57020a2a5fd26064050d958c1cb05217f6753d6422d9c39b08e6adaef076d73f
-
SHA512
be9bab0a24ae9129b3f1e37370ca584697c8e3a10ba21436b1ffdf24c3847bed27b800edfec73ec3c42ea705f5c9c296d145691c46562eca4638ccb029527b6c
-
SSDEEP
1536:255u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:8MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-