Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-01-01_155cff2f8564f09df298159b311a978f_gandcrab
-
Size
73KB
-
Sample
250101-w5wmnazmdm
-
MD5
155cff2f8564f09df298159b311a978f
-
SHA1
4b8495221d515677bfb757e7ed038dcab88daaff
-
SHA256
b85902c680e42de3a93b3f50f5f5c9d88af4903e661d1400537f3a18f61f80d2
-
SHA512
8633dc78aa20e21e1721d2882c0244d864860f12ab507a80e92456de144815bbd158fb7a04b3926a94ed782901a7e913b3b4769b1e576eb82a76baf47d0fe915
-
SSDEEP
1536:JZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd6:1BounVyFHpfMqqDL2/Lkvd6
Behavioral task
behavioral1
Sample
2025-01-01_155cff2f8564f09df298159b311a978f_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-01_155cff2f8564f09df298159b311a978f_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2025-01-01_155cff2f8564f09df298159b311a978f_gandcrab
-
Size
73KB
-
MD5
155cff2f8564f09df298159b311a978f
-
SHA1
4b8495221d515677bfb757e7ed038dcab88daaff
-
SHA256
b85902c680e42de3a93b3f50f5f5c9d88af4903e661d1400537f3a18f61f80d2
-
SHA512
8633dc78aa20e21e1721d2882c0244d864860f12ab507a80e92456de144815bbd158fb7a04b3926a94ed782901a7e913b3b4769b1e576eb82a76baf47d0fe915
-
SSDEEP
1536:JZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd6:1BounVyFHpfMqqDL2/Lkvd6
Score10/10-
GandCrab payload
-
Gandcrab family
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-