General
-
Target
2025-01-14_fef1bfd0d20d527e7f3bda0cee586822_gandcrab
-
Size
73KB
-
Sample
250114-hwdhts1jcw
-
MD5
fef1bfd0d20d527e7f3bda0cee586822
-
SHA1
d6d04e42607f2a3456051d0aef08d6f270eb2936
-
SHA256
cdddbbaf45809237884e383145865ca921cfd008342a7af54ab188fc07658b33
-
SHA512
aa160e72655e8866de0d7c5b2aa148aa09cfc135933e44f336d8e4c004b8b96c3732a1381a80efb62a29478daf43cd2d8b56281d1dda095e8ac28a4279d44497
-
SSDEEP
1536:155u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:dMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2025-01-14_fef1bfd0d20d527e7f3bda0cee586822_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-14_fef1bfd0d20d527e7f3bda0cee586822_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-14_fef1bfd0d20d527e7f3bda0cee586822_gandcrab
-
Size
73KB
-
MD5
fef1bfd0d20d527e7f3bda0cee586822
-
SHA1
d6d04e42607f2a3456051d0aef08d6f270eb2936
-
SHA256
cdddbbaf45809237884e383145865ca921cfd008342a7af54ab188fc07658b33
-
SHA512
aa160e72655e8866de0d7c5b2aa148aa09cfc135933e44f336d8e4c004b8b96c3732a1381a80efb62a29478daf43cd2d8b56281d1dda095e8ac28a4279d44497
-
SSDEEP
1536:155u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:dMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-