General
-
Target
2025-01-03_4cbfabcf886ea5e328eb13949884b945_gandcrab
-
Size
346KB
-
Sample
250103-le6d3azmdr
-
MD5
4cbfabcf886ea5e328eb13949884b945
-
SHA1
a734de15e7e84ff6164431b7d96644d621010537
-
SHA256
ce63725f479ad5f8877b430583a47a1fe0eb8a58798b9eead2b6d4e6c99861fc
-
SHA512
be4c23dbe7e8fbb3238858a46651ba814bbd5b24c7abafcfa62fd30ce8440d407801786930c78ec8312d3794af55f7a938954caf589d5d2b619a0c1e6d255b10
-
SSDEEP
3072:NMSjOnrmBxMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdMEa83Rg0EkmlB1yihDNC+:NXjOnr6aqqDL64vdyQmIihDNCwQIPP
Behavioral task
behavioral1
Sample
2025-01-03_4cbfabcf886ea5e328eb13949884b945_gandcrab.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2025-01-03_4cbfabcf886ea5e328eb13949884b945_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-03_4cbfabcf886ea5e328eb13949884b945_gandcrab
-
Size
346KB
-
MD5
4cbfabcf886ea5e328eb13949884b945
-
SHA1
a734de15e7e84ff6164431b7d96644d621010537
-
SHA256
ce63725f479ad5f8877b430583a47a1fe0eb8a58798b9eead2b6d4e6c99861fc
-
SHA512
be4c23dbe7e8fbb3238858a46651ba814bbd5b24c7abafcfa62fd30ce8440d407801786930c78ec8312d3794af55f7a938954caf589d5d2b619a0c1e6d255b10
-
SSDEEP
3072:NMSjOnrmBxMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdMEa83Rg0EkmlB1yihDNC+:NXjOnr6aqqDL64vdyQmIihDNCwQIPP
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-