General
-
Target
2025-01-13_e2716c95eb12323c3fac526370a0cb40_gandcrab
-
Size
73KB
-
Sample
250113-zdr2yaxjdt
-
MD5
e2716c95eb12323c3fac526370a0cb40
-
SHA1
c55e8339d8ef8b6d0e706f942df792e943757fc9
-
SHA256
7d44c1269ceb1dbc1d1f4c7e91a10dbe12c0ed761c2629189928e45d3c21902e
-
SHA512
1485d83c31a9277863b796d9d6eb49eaaaeb1d3d20880160f33d5d4ee1916b8d3c16aea1b0ec0a52a48036fd4e59e7df7eab9bb8e7257a51e3fb5c4a402f5fa2
-
SSDEEP
1536:j55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:/MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2025-01-13_e2716c95eb12323c3fac526370a0cb40_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-13_e2716c95eb12323c3fac526370a0cb40_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-13_e2716c95eb12323c3fac526370a0cb40_gandcrab
-
Size
73KB
-
MD5
e2716c95eb12323c3fac526370a0cb40
-
SHA1
c55e8339d8ef8b6d0e706f942df792e943757fc9
-
SHA256
7d44c1269ceb1dbc1d1f4c7e91a10dbe12c0ed761c2629189928e45d3c21902e
-
SHA512
1485d83c31a9277863b796d9d6eb49eaaaeb1d3d20880160f33d5d4ee1916b8d3c16aea1b0ec0a52a48036fd4e59e7df7eab9bb8e7257a51e3fb5c4a402f5fa2
-
SSDEEP
1536:j55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:/MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-