General
-
Target
2025-01-24_17e894d5b7ea82f7db2fb640c1a2dfb9_gandcrab
-
Size
73KB
-
Sample
250124-f3fknatkan
-
MD5
17e894d5b7ea82f7db2fb640c1a2dfb9
-
SHA1
62d6af7f12cc1ad71e75d1cbd50d1a79f48e1703
-
SHA256
89ca1eadb371aacc627c37a928541d601d2f8f4c3b09c8380916cfd25df32d1f
-
SHA512
075a09405538c893833bbd930dbf05194a2132845f38b076c2f237222edf54545b47c3710db75489d3e5348e56e60a949a9bd55fe208f1354c73d68e25402179
-
SSDEEP
1536:v55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:bMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-24_17e894d5b7ea82f7db2fb640c1a2dfb9_gandcrab.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2025-01-24_17e894d5b7ea82f7db2fb640c1a2dfb9_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-24_17e894d5b7ea82f7db2fb640c1a2dfb9_gandcrab
-
Size
73KB
-
MD5
17e894d5b7ea82f7db2fb640c1a2dfb9
-
SHA1
62d6af7f12cc1ad71e75d1cbd50d1a79f48e1703
-
SHA256
89ca1eadb371aacc627c37a928541d601d2f8f4c3b09c8380916cfd25df32d1f
-
SHA512
075a09405538c893833bbd930dbf05194a2132845f38b076c2f237222edf54545b47c3710db75489d3e5348e56e60a949a9bd55fe208f1354c73d68e25402179
-
SSDEEP
1536:v55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:bMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-