General
-
Target
2025-01-01_ee30d9fad769850fd663addae8bf0c5c_gandcrab
-
Size
75KB
-
Sample
250101-xxdbsa1rek
-
MD5
ee30d9fad769850fd663addae8bf0c5c
-
SHA1
ae96a2131c906e6d470a1f226d1c2a95ad8a3bcf
-
SHA256
30808a48803b46789f39b651ae26e4d0dbf5bd90926e6b0c1c9e35527b61fe54
-
SHA512
cebb864312df0f4f9e74f1d4c730e9e4463c7f991552eb2164559a81b40dece1c68e567c52bf92e3460b202e7daed3e4c4d43bd9251f80f7abe76047fa878b53
-
SSDEEP
1536:FgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdvYAY:FMSjOnrmBbMqqMmr3IdE8we0Avu5r++a
Behavioral task
behavioral1
Sample
2025-01-01_ee30d9fad769850fd663addae8bf0c5c_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-01_ee30d9fad769850fd663addae8bf0c5c_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-01_ee30d9fad769850fd663addae8bf0c5c_gandcrab
-
Size
75KB
-
MD5
ee30d9fad769850fd663addae8bf0c5c
-
SHA1
ae96a2131c906e6d470a1f226d1c2a95ad8a3bcf
-
SHA256
30808a48803b46789f39b651ae26e4d0dbf5bd90926e6b0c1c9e35527b61fe54
-
SHA512
cebb864312df0f4f9e74f1d4c730e9e4463c7f991552eb2164559a81b40dece1c68e567c52bf92e3460b202e7daed3e4c4d43bd9251f80f7abe76047fa878b53
-
SSDEEP
1536:FgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdvYAY:FMSjOnrmBbMqqMmr3IdE8we0Avu5r++a
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-