Extracted

• • Target

    2025-01-01_92ae52c68fba584f1a6a89e098bb1441_gandcrab

  • Size

    74KB

  • MD5

    92ae52c68fba584f1a6a89e098bb1441

  • SHA1

    2e21cc92e214f845ee87daac7a4ee541191500ff

  • SHA256

    e4066a70633ffbd5ac4434f6bc8340a07f9827d0cefe8e779f429b7cb352fe9d

  • SHA512

    1978eb053d03b34d8a9459398c565e380f1e9eeab101a0c439602cd3fddfb60457456b7fdc59d7e031a4bea05df38f15798d81a494b215770001e48621e360ce

  • SSDEEP

    1536:U55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:GMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

  Score

  10^/10

  gandcrabbackdoordiscoverypersistenceransomware

  • GandCrab payload

  • Gandcrab

    Gandcrab is a Trojan horse that encrypts files on a computer.

    ransomwarebackdoorgandcrab

  • Gandcrab family

    gandcrab

  • Adds Run key to start application

    persistence

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2