Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-01-16_a8149334efd86a332aafeef7a1d9838f_gandcrab
-
Size
73KB
-
Sample
250116-z9y55azrbp
-
MD5
a8149334efd86a332aafeef7a1d9838f
-
SHA1
2ccab88c9f9dc2c8816419fd64a4dacabe324b40
-
SHA256
82d1a4aecfaca2036dffd9c514fe6f3c68421d73028c0f6078c88c7691050cd6
-
SHA512
5b6137fab0116e676e230eec0e4731fe54f927247dfe473ddd3c571f45a0600c466e57b269889278f35c1e9c728d01ec7c011320a244f71d9603e0b532f6e16d
-
SSDEEP
1536:G55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:sMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2025-01-16_a8149334efd86a332aafeef7a1d9838f_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-16_a8149334efd86a332aafeef7a1d9838f_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-16_a8149334efd86a332aafeef7a1d9838f_gandcrab
-
Size
73KB
-
MD5
a8149334efd86a332aafeef7a1d9838f
-
SHA1
2ccab88c9f9dc2c8816419fd64a4dacabe324b40
-
SHA256
82d1a4aecfaca2036dffd9c514fe6f3c68421d73028c0f6078c88c7691050cd6
-
SHA512
5b6137fab0116e676e230eec0e4731fe54f927247dfe473ddd3c571f45a0600c466e57b269889278f35c1e9c728d01ec7c011320a244f71d9603e0b532f6e16d
-
SSDEEP
1536:G55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:sMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-