General
-
Target
2025-01-02_c3b891854edc35b99c0f1d6873ad3518_gandcrab
-
Size
73KB
-
Sample
250102-en2znsvmeq
-
MD5
c3b891854edc35b99c0f1d6873ad3518
-
SHA1
f34179a8a3663a94f8edc5cb1a28cfedcf25a988
-
SHA256
1e17f23268f19234ffbf0b4cfc4331b8512a535a60a7d7dbeb960722f92b440c
-
SHA512
ca768b656e7e5794564f5e5c22ee2be99bdbb00bf1f661a89dc0a6697c23e00f5937001346ebeeda5e62ec249fe234c45fc75101e43e4e054977803239394fa2
-
SSDEEP
1536:H555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:IMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-02_c3b891854edc35b99c0f1d6873ad3518_gandcrab.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2025-01-02_c3b891854edc35b99c0f1d6873ad3518_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-02_c3b891854edc35b99c0f1d6873ad3518_gandcrab
-
Size
73KB
-
MD5
c3b891854edc35b99c0f1d6873ad3518
-
SHA1
f34179a8a3663a94f8edc5cb1a28cfedcf25a988
-
SHA256
1e17f23268f19234ffbf0b4cfc4331b8512a535a60a7d7dbeb960722f92b440c
-
SHA512
ca768b656e7e5794564f5e5c22ee2be99bdbb00bf1f661a89dc0a6697c23e00f5937001346ebeeda5e62ec249fe234c45fc75101e43e4e054977803239394fa2
-
SSDEEP
1536:H555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:IMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-