General
-
Target
2025-01-11_dc784134ecde16afc21ff329b6ed729e_gandcrab
-
Size
573KB
-
Sample
250111-kz8t9awpfq
-
MD5
dc784134ecde16afc21ff329b6ed729e
-
SHA1
d5d050b4205c1090a4999e5cb9ac3324eeb831cf
-
SHA256
2de7eca6020530335ac26f90ba354cc90246565787f6e918be01383804039a33
-
SHA512
8ae32e99b68f03faac946a77aab3f3c9f4fe6edfcc9e00d9d2f285e37dfc0771829351d7f44e61615b651b9c33b402565e50ef141a06105e9ad0639aa6551efb
-
SSDEEP
12288:UTOnYqn6c+KWqQqkd1BtOkodxduog/TXJa/x82IErOJs:I3+6c+KWNGuog/TXJmxO
Behavioral task
behavioral1
Sample
2025-01-11_dc784134ecde16afc21ff329b6ed729e_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-11_dc784134ecde16afc21ff329b6ed729e_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-11_dc784134ecde16afc21ff329b6ed729e_gandcrab
-
Size
573KB
-
MD5
dc784134ecde16afc21ff329b6ed729e
-
SHA1
d5d050b4205c1090a4999e5cb9ac3324eeb831cf
-
SHA256
2de7eca6020530335ac26f90ba354cc90246565787f6e918be01383804039a33
-
SHA512
8ae32e99b68f03faac946a77aab3f3c9f4fe6edfcc9e00d9d2f285e37dfc0771829351d7f44e61615b651b9c33b402565e50ef141a06105e9ad0639aa6551efb
-
SSDEEP
12288:UTOnYqn6c+KWqQqkd1BtOkodxduog/TXJa/x82IErOJs:I3+6c+KWNGuog/TXJmxO
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-