General
-
Target
2025-01-04_d60f85d37bc7d6d4ec8f24f81778e83e_gandcrab
-
Size
201KB
-
Sample
250104-fqknvatlat
-
MD5
d60f85d37bc7d6d4ec8f24f81778e83e
-
SHA1
38730084b8d0b310f320b76ffd2c416ba29756c0
-
SHA256
7ac562b71bcdeb7148f6d52a0ea383201d50c6368aa459bd9e07c4f46b1ecd02
-
SHA512
f478ad73aaad2b67bf309e631ce516310d2a2c7a3b9082c84d6466899ae51a53e4cf37dfdefe7bbbac3658937b56bddc0db9c289b9f3a213a863e4dc5ad5f16d
-
SSDEEP
6144:7XjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:7TOnYqn6cuLiExpQJ98eCgoo2oTO3
Behavioral task
behavioral1
Sample
2025-01-04_d60f85d37bc7d6d4ec8f24f81778e83e_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-04_d60f85d37bc7d6d4ec8f24f81778e83e_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-04_d60f85d37bc7d6d4ec8f24f81778e83e_gandcrab
-
Size
201KB
-
MD5
d60f85d37bc7d6d4ec8f24f81778e83e
-
SHA1
38730084b8d0b310f320b76ffd2c416ba29756c0
-
SHA256
7ac562b71bcdeb7148f6d52a0ea383201d50c6368aa459bd9e07c4f46b1ecd02
-
SHA512
f478ad73aaad2b67bf309e631ce516310d2a2c7a3b9082c84d6466899ae51a53e4cf37dfdefe7bbbac3658937b56bddc0db9c289b9f3a213a863e4dc5ad5f16d
-
SSDEEP
6144:7XjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:7TOnYqn6cuLiExpQJ98eCgoo2oTO3
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-