General
-
Target
2025-01-27_2b2ce4c05feb279e9b569d918aa4112e_gandcrab
-
Size
73KB
-
Sample
250127-tvpp9axjex
-
MD5
2b2ce4c05feb279e9b569d918aa4112e
-
SHA1
ee3cc55c9c5c45959cd032cc3a68e072d8e6d8f4
-
SHA256
be26ebe639f2e5daed43cedd82e31727395cbb9e283ae9c9c9ba7abdf19d40ad
-
SHA512
016cb2ff84e58827a3887a41d4d862552cb7e7b217a7732ababa68be277e7483c54141af284f9b00b2575c6c079e6a5efda4b927d8d345966bd03637f4ce3df7
-
SSDEEP
1536:h55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:JMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-27_2b2ce4c05feb279e9b569d918aa4112e_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-27_2b2ce4c05feb279e9b569d918aa4112e_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-27_2b2ce4c05feb279e9b569d918aa4112e_gandcrab
-
Size
73KB
-
MD5
2b2ce4c05feb279e9b569d918aa4112e
-
SHA1
ee3cc55c9c5c45959cd032cc3a68e072d8e6d8f4
-
SHA256
be26ebe639f2e5daed43cedd82e31727395cbb9e283ae9c9c9ba7abdf19d40ad
-
SHA512
016cb2ff84e58827a3887a41d4d862552cb7e7b217a7732ababa68be277e7483c54141af284f9b00b2575c6c079e6a5efda4b927d8d345966bd03637f4ce3df7
-
SSDEEP
1536:h55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:JMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-