General
-
Target
2024-12-19_5ec479a2b4223be3ead3a4331da5cb18_gandcrab
-
Size
73KB
-
Sample
241219-cyh87stpdm
-
MD5
5ec479a2b4223be3ead3a4331da5cb18
-
SHA1
7a69a63f7ae441cf51f8ad28a4450e01bdf51dde
-
SHA256
5afa869d4c33c707e60d0ec028236f2a16a6bab0ba2d5ceb5635cbc359b3a77b
-
SHA512
9705ca06fdbc29c635dfa5188b25683f3dec775277ea51f0ada89426ff6820b114128e3ce617b4bdf4e3cdb4a6dd32b73661bc5c02bf3cbdbe487c9a67753d97
-
SSDEEP
1536:WgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdvd:WMSjOnrmBbMqqMmr3IdE8we0Avu5r++P
Behavioral task
behavioral1
Sample
2024-12-19_5ec479a2b4223be3ead3a4331da5cb18_gandcrab.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-12-19_5ec479a2b4223be3ead3a4331da5cb18_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-12-19_5ec479a2b4223be3ead3a4331da5cb18_gandcrab
-
Size
73KB
-
MD5
5ec479a2b4223be3ead3a4331da5cb18
-
SHA1
7a69a63f7ae441cf51f8ad28a4450e01bdf51dde
-
SHA256
5afa869d4c33c707e60d0ec028236f2a16a6bab0ba2d5ceb5635cbc359b3a77b
-
SHA512
9705ca06fdbc29c635dfa5188b25683f3dec775277ea51f0ada89426ff6820b114128e3ce617b4bdf4e3cdb4a6dd32b73661bc5c02bf3cbdbe487c9a67753d97
-
SSDEEP
1536:WgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdvd:WMSjOnrmBbMqqMmr3IdE8we0Avu5r++P
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-