General
-
Target
2025-01-01_e1673051ffd8c791ff9d56fb658e1bf1_gandcrab
-
Size
286KB
-
Sample
250101-szhbaszph1
-
MD5
e1673051ffd8c791ff9d56fb658e1bf1
-
SHA1
485eec06d4e68e3e0cb9a39c0529d1d1bfb3decf
-
SHA256
d6d5ca6a6cfc458c8d2084859864d99d2bf2dcca663078a34711b68b9d1f1ace
-
SHA512
27bde4deda39b95f7639801cfb7ba85fb2313c02a5bd0d7eda75b96847c0d116b5e24391841ddab4a01c5ba904af18bf446ccf534a30aaea85a4f56409f483c8
-
SSDEEP
6144:kXjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:kTOnYqn6cwrm1sB7F51YD+lW8qeiO/sf
Behavioral task
behavioral1
Sample
2025-01-01_e1673051ffd8c791ff9d56fb658e1bf1_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-01_e1673051ffd8c791ff9d56fb658e1bf1_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-01_e1673051ffd8c791ff9d56fb658e1bf1_gandcrab
-
Size
286KB
-
MD5
e1673051ffd8c791ff9d56fb658e1bf1
-
SHA1
485eec06d4e68e3e0cb9a39c0529d1d1bfb3decf
-
SHA256
d6d5ca6a6cfc458c8d2084859864d99d2bf2dcca663078a34711b68b9d1f1ace
-
SHA512
27bde4deda39b95f7639801cfb7ba85fb2313c02a5bd0d7eda75b96847c0d116b5e24391841ddab4a01c5ba904af18bf446ccf534a30aaea85a4f56409f483c8
-
SSDEEP
6144:kXjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:kTOnYqn6cwrm1sB7F51YD+lW8qeiO/sf
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-