General
-
Target
2025-01-22_130273da258792986194a3f19d5e8729_gandcrab
-
Size
73KB
-
Sample
250122-rvqlfazrgz
-
MD5
130273da258792986194a3f19d5e8729
-
SHA1
a1c708ef9d9cc6540216c3d1292abe9f7112a127
-
SHA256
d084b591eb46d2f147b306c8d6ca41f68b11af05505a4ae993fd1ff616567988
-
SHA512
592c039babeaa56f6b14413906d009ff530c552dc685bf53ff00a590ebb82112656c099157b2287a3f57c3f035e9972f5445cea130d9afe81f3c4fcd48760ef6
-
SSDEEP
1536:C55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:4MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-22_130273da258792986194a3f19d5e8729_gandcrab.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2025-01-22_130273da258792986194a3f19d5e8729_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-22_130273da258792986194a3f19d5e8729_gandcrab
-
Size
73KB
-
MD5
130273da258792986194a3f19d5e8729
-
SHA1
a1c708ef9d9cc6540216c3d1292abe9f7112a127
-
SHA256
d084b591eb46d2f147b306c8d6ca41f68b11af05505a4ae993fd1ff616567988
-
SHA512
592c039babeaa56f6b14413906d009ff530c552dc685bf53ff00a590ebb82112656c099157b2287a3f57c3f035e9972f5445cea130d9afe81f3c4fcd48760ef6
-
SSDEEP
1536:C55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:4MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-