General
-
Target
2025-01-24_23ec29a3485aa1fbdbf7593d33fcd09d_gandcrab
-
Size
73KB
-
Sample
250124-twxr9aylgl
-
MD5
23ec29a3485aa1fbdbf7593d33fcd09d
-
SHA1
95965f7d232217bde407b8647d4401a61efa3a1f
-
SHA256
fe4e37445f4d7af37733ca5ac6c3d7136b1e754eb894c6006fdb62853f2d6b3a
-
SHA512
c3c82fea3efddd5905e63369fcb67957886d0dd4550f49fec25172217ca135232657c3c46b85494c7aaf30597ce511da68090df1ebe95e36bf057cf47b32920c
-
SSDEEP
1536:i55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:YMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-24_23ec29a3485aa1fbdbf7593d33fcd09d_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-24_23ec29a3485aa1fbdbf7593d33fcd09d_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-24_23ec29a3485aa1fbdbf7593d33fcd09d_gandcrab
-
Size
73KB
-
MD5
23ec29a3485aa1fbdbf7593d33fcd09d
-
SHA1
95965f7d232217bde407b8647d4401a61efa3a1f
-
SHA256
fe4e37445f4d7af37733ca5ac6c3d7136b1e754eb894c6006fdb62853f2d6b3a
-
SHA512
c3c82fea3efddd5905e63369fcb67957886d0dd4550f49fec25172217ca135232657c3c46b85494c7aaf30597ce511da68090df1ebe95e36bf057cf47b32920c
-
SSDEEP
1536:i55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:YMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-