General
-
Target
2025-01-02_c962a52995de244928e6c5eeeb549e47_gandcrab
-
Size
75KB
-
Sample
250102-jypjjsvnap
-
MD5
c962a52995de244928e6c5eeeb549e47
-
SHA1
e6d9d11e603e4b424af0bc397b52eb65f93e1acb
-
SHA256
abbda8f3550235ba4ecc4b9ae38ab781bbbab6266d6d6c2480dc2d77108241ec
-
SHA512
d7a09090358b158904f0e86ed9b780d55d03cf9b2329466d23f3f0cf6807616050c9a68705cfd368c9d6638e9f66b34bf361aa574cea5886ad232c5beee4c142
-
SSDEEP
1536:Z555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rA:mMSjOnrmBxMqqDL2/mr3IdE8we0Avu50
Behavioral task
behavioral1
Sample
2025-01-02_c962a52995de244928e6c5eeeb549e47_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-02_c962a52995de244928e6c5eeeb549e47_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-02_c962a52995de244928e6c5eeeb549e47_gandcrab
-
Size
75KB
-
MD5
c962a52995de244928e6c5eeeb549e47
-
SHA1
e6d9d11e603e4b424af0bc397b52eb65f93e1acb
-
SHA256
abbda8f3550235ba4ecc4b9ae38ab781bbbab6266d6d6c2480dc2d77108241ec
-
SHA512
d7a09090358b158904f0e86ed9b780d55d03cf9b2329466d23f3f0cf6807616050c9a68705cfd368c9d6638e9f66b34bf361aa574cea5886ad232c5beee4c142
-
SSDEEP
1536:Z555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rA:mMSjOnrmBxMqqDL2/mr3IdE8we0Avu50
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-