General
-
Target
2025-01-04_184e133546c79a6917bb41f30903ac73_gandcrab
-
Size
201KB
-
Sample
250104-dw49bs1mbq
-
MD5
184e133546c79a6917bb41f30903ac73
-
SHA1
2795eb6f82dbccd03ef0e2e415cd7fe6b786f745
-
SHA256
60b16866c1da95b5ae8dcab7700d7f03844ea2814639db1a3429700ba2303a7e
-
SHA512
4e4086b46eae61d38cd75f6efe139f59776ae9fe2b7e7d7fe05a50f2d84d1c91e9874685658bacf88ad1e730fa65dbe916333ad3d271e4b87d23fa0b262c0aea
-
SSDEEP
6144:qXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:qTOnYqn6cuLiExpQJ98eCgoo2oTO3
Behavioral task
behavioral1
Sample
2025-01-04_184e133546c79a6917bb41f30903ac73_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-04_184e133546c79a6917bb41f30903ac73_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-04_184e133546c79a6917bb41f30903ac73_gandcrab
-
Size
201KB
-
MD5
184e133546c79a6917bb41f30903ac73
-
SHA1
2795eb6f82dbccd03ef0e2e415cd7fe6b786f745
-
SHA256
60b16866c1da95b5ae8dcab7700d7f03844ea2814639db1a3429700ba2303a7e
-
SHA512
4e4086b46eae61d38cd75f6efe139f59776ae9fe2b7e7d7fe05a50f2d84d1c91e9874685658bacf88ad1e730fa65dbe916333ad3d271e4b87d23fa0b262c0aea
-
SSDEEP
6144:qXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:qTOnYqn6cuLiExpQJ98eCgoo2oTO3
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-