General
-
Target
2025-01-23_0838ed188cd5841cbf0c5d5de8bdad40_gandcrab
-
Size
73KB
-
Sample
250123-y62w6stlgp
-
MD5
0838ed188cd5841cbf0c5d5de8bdad40
-
SHA1
9c933869e9efc9983cc72871a19567da558c0b1d
-
SHA256
ba3cf6d09a2fcf043f5c25bee4e16a89eb70dd668b6ee0e8fe92c1e649d9d69c
-
SHA512
4c14a52ce08d396707a90bbb755555ee47c955de7bb22cd3829008814dd543e10028228c1cc15c7252fe6ef0c5e2eb0a6fccfbad0a1b698bf4d7b5fcdecfe6bc
-
SSDEEP
1536:g55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:SMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-23_0838ed188cd5841cbf0c5d5de8bdad40_gandcrab.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2025-01-23_0838ed188cd5841cbf0c5d5de8bdad40_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-23_0838ed188cd5841cbf0c5d5de8bdad40_gandcrab
-
Size
73KB
-
MD5
0838ed188cd5841cbf0c5d5de8bdad40
-
SHA1
9c933869e9efc9983cc72871a19567da558c0b1d
-
SHA256
ba3cf6d09a2fcf043f5c25bee4e16a89eb70dd668b6ee0e8fe92c1e649d9d69c
-
SHA512
4c14a52ce08d396707a90bbb755555ee47c955de7bb22cd3829008814dd543e10028228c1cc15c7252fe6ef0c5e2eb0a6fccfbad0a1b698bf4d7b5fcdecfe6bc
-
SSDEEP
1536:g55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:SMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-