Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-01-23_181cfaeace975e65189695784323e1b2_gandcrab
-
Size
72KB
-
Sample
250123-z865cavqhm
-
MD5
181cfaeace975e65189695784323e1b2
-
SHA1
e549083b478dfbe3fbc7b5020fa758b408d1e363
-
SHA256
232d3e57a39b1c9e67e346d998711859a4b6c3ed9b3689c943b5ac42cde83f9f
-
SHA512
704f65bc27321b68f20160f639bd572783a3c83a1a2a30ad49d97d5007e80f13f470c4a39c19f58ca1a88f1c389518fd68fd3a843077586d769483d968b0d346
-
SSDEEP
1536:/ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXouvVdq8hbHnAwfMqqU+2bbbAV2/S2Lkvj:XBouvVzFHpfMqqDL2/Lkvd
Behavioral task
behavioral1
Sample
2025-01-23_181cfaeace975e65189695784323e1b2_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-23_181cfaeace975e65189695784323e1b2_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2025-01-23_181cfaeace975e65189695784323e1b2_gandcrab
-
Size
72KB
-
MD5
181cfaeace975e65189695784323e1b2
-
SHA1
e549083b478dfbe3fbc7b5020fa758b408d1e363
-
SHA256
232d3e57a39b1c9e67e346d998711859a4b6c3ed9b3689c943b5ac42cde83f9f
-
SHA512
704f65bc27321b68f20160f639bd572783a3c83a1a2a30ad49d97d5007e80f13f470c4a39c19f58ca1a88f1c389518fd68fd3a843077586d769483d968b0d346
-
SSDEEP
1536:/ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXouvVdq8hbHnAwfMqqU+2bbbAV2/S2Lkvj:XBouvVzFHpfMqqDL2/Lkvd
Score10/10-
GandCrab payload
-
Gandcrab family
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-