General
-
Target
2025-01-04_5f57a7e6df605ba4edd833434c87a93d_gandcrab
-
Size
156KB
-
Sample
250104-dxkw3symgv
-
MD5
5f57a7e6df605ba4edd833434c87a93d
-
SHA1
abcd1d2d166af6b9757f35044559839686467bd0
-
SHA256
fdeba009908d5ffc67f42682908445a3db5c84323f2b80d702df5e1f6fa383ef
-
SHA512
7381a6b6c03fe01df6a125b424ef5e3594d387c6cb23fda506cf93e07220cb632a9d741cb1278e1b42ccfe77ded90f3d8c4ae6fcbf8ed9ff3794da6577ca103f
-
SSDEEP
3072:2MSjOnrmBTMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdQjFjG82RG3lYv/G3p9BLs:2XjOnr6gqqDL64vdsFjz2RG3lN/5GQQP
Behavioral task
behavioral1
Sample
2025-01-04_5f57a7e6df605ba4edd833434c87a93d_gandcrab.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2025-01-04_5f57a7e6df605ba4edd833434c87a93d_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-04_5f57a7e6df605ba4edd833434c87a93d_gandcrab
-
Size
156KB
-
MD5
5f57a7e6df605ba4edd833434c87a93d
-
SHA1
abcd1d2d166af6b9757f35044559839686467bd0
-
SHA256
fdeba009908d5ffc67f42682908445a3db5c84323f2b80d702df5e1f6fa383ef
-
SHA512
7381a6b6c03fe01df6a125b424ef5e3594d387c6cb23fda506cf93e07220cb632a9d741cb1278e1b42ccfe77ded90f3d8c4ae6fcbf8ed9ff3794da6577ca103f
-
SSDEEP
3072:2MSjOnrmBTMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdQjFjG82RG3lYv/G3p9BLs:2XjOnr6gqqDL64vdsFjz2RG3lN/5GQQP
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-