General
-
Target
2025-01-13_43d135ff50d5ddd77f26d9c2fcf84ec4_gandcrab
-
Size
201KB
-
Sample
250113-c1yfxatrbj
-
MD5
43d135ff50d5ddd77f26d9c2fcf84ec4
-
SHA1
7aceff4cdf7d76e63c2a62c280cb9acfecfc60a8
-
SHA256
6e018e47e10d531e21d71bafc3e0bfa958b32bb4abe788408f81107c815030a2
-
SHA512
32caeca2bdbf36c44df7f23e957cdd3e20addfd97f09a40dbeea8e300fc36a948e6b62398b1729107d165e4d9e5e00d7be1fd25f8f0c6f076c3c2242d32ce46e
-
SSDEEP
6144:iXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:iTOnYqn6cuLiExpQJ98eCgoo2oTO3
Behavioral task
behavioral1
Sample
2025-01-13_43d135ff50d5ddd77f26d9c2fcf84ec4_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-13_43d135ff50d5ddd77f26d9c2fcf84ec4_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-13_43d135ff50d5ddd77f26d9c2fcf84ec4_gandcrab
-
Size
201KB
-
MD5
43d135ff50d5ddd77f26d9c2fcf84ec4
-
SHA1
7aceff4cdf7d76e63c2a62c280cb9acfecfc60a8
-
SHA256
6e018e47e10d531e21d71bafc3e0bfa958b32bb4abe788408f81107c815030a2
-
SHA512
32caeca2bdbf36c44df7f23e957cdd3e20addfd97f09a40dbeea8e300fc36a948e6b62398b1729107d165e4d9e5e00d7be1fd25f8f0c6f076c3c2242d32ce46e
-
SSDEEP
6144:iXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:iTOnYqn6cuLiExpQJ98eCgoo2oTO3
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-