General
-
Target
2024-12-08_0d5f563dd458e69732b2a1d00739b9d7_gandcrab
-
Size
73KB
-
Sample
241208-ey8j7sxnbp
-
MD5
0d5f563dd458e69732b2a1d00739b9d7
-
SHA1
f3d48c5c2aceca291339050a51b560a7fed841a8
-
SHA256
ce849807ca1163d1ca88fbd073dec482ba6810a0d2f4ffe665d854491c474403
-
SHA512
dcd232c349453a8224c074488a4751d367cdd782395bcae661a06213fd26602bb13f6e9fd76117c9ee860b5734ee5a42cb73abc88bb87acc12a5a2157a65ca89
-
SSDEEP
1536:t55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:FMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2024-12-08_0d5f563dd458e69732b2a1d00739b9d7_gandcrab.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
2024-12-08_0d5f563dd458e69732b2a1d00739b9d7_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-12-08_0d5f563dd458e69732b2a1d00739b9d7_gandcrab
-
Size
73KB
-
MD5
0d5f563dd458e69732b2a1d00739b9d7
-
SHA1
f3d48c5c2aceca291339050a51b560a7fed841a8
-
SHA256
ce849807ca1163d1ca88fbd073dec482ba6810a0d2f4ffe665d854491c474403
-
SHA512
dcd232c349453a8224c074488a4751d367cdd782395bcae661a06213fd26602bb13f6e9fd76117c9ee860b5734ee5a42cb73abc88bb87acc12a5a2157a65ca89
-
SSDEEP
1536:t55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:FMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-