General
-
Target
2025-01-23_191aeb0fa433ac533402b0b47b3d73ae_gandcrab
-
Size
73KB
-
Sample
250123-g7b9gawrcy
-
MD5
191aeb0fa433ac533402b0b47b3d73ae
-
SHA1
0ee46dfe059c69048a49de608fd33da77ab13b64
-
SHA256
376d590307c69506f6ddc2faf8ae647830b0487189938234e0856d50fe8d4e8f
-
SHA512
7a460bc83f1dca376f65118b3e45f6da496dbb413057ef7ee0263408bc432652aee14a594a0d6dc13e06efd8354cb96fb7a48082a82a3b23ead48e9811e061b5
-
SSDEEP
1536:q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:wMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-23_191aeb0fa433ac533402b0b47b3d73ae_gandcrab.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2025-01-23_191aeb0fa433ac533402b0b47b3d73ae_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-23_191aeb0fa433ac533402b0b47b3d73ae_gandcrab
-
Size
73KB
-
MD5
191aeb0fa433ac533402b0b47b3d73ae
-
SHA1
0ee46dfe059c69048a49de608fd33da77ab13b64
-
SHA256
376d590307c69506f6ddc2faf8ae647830b0487189938234e0856d50fe8d4e8f
-
SHA512
7a460bc83f1dca376f65118b3e45f6da496dbb413057ef7ee0263408bc432652aee14a594a0d6dc13e06efd8354cb96fb7a48082a82a3b23ead48e9811e061b5
-
SSDEEP
1536:q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:wMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-