General
-
Target
2025-01-27_29f4c053f9521dc75671f6a6804e30a7_gandcrab
-
Size
97KB
-
Sample
250127-z8d4kawpel
-
MD5
29f4c053f9521dc75671f6a6804e30a7
-
SHA1
7b8cb7c62001056fb1317b85dc0c7a0f8fa61755
-
SHA256
9e0a26f7b1d5f8f23e1428c303dc23365cacb6c11b24be425d0ff42edb812522
-
SHA512
9efee14860e3e66ad642f1a19af63c1687d7c270ba0581a893b5a56dd4c3acb7b83070571ed918749b570941351aadb33b45f4653d106235b3c643ae6adc87b0
-
SSDEEP
1536:5ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:lBounVyFHFMqqDL2/LgHkc2
Behavioral task
behavioral1
Sample
2025-01-27_29f4c053f9521dc75671f6a6804e30a7_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-27_29f4c053f9521dc75671f6a6804e30a7_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2025-01-27_29f4c053f9521dc75671f6a6804e30a7_gandcrab
-
Size
97KB
-
MD5
29f4c053f9521dc75671f6a6804e30a7
-
SHA1
7b8cb7c62001056fb1317b85dc0c7a0f8fa61755
-
SHA256
9e0a26f7b1d5f8f23e1428c303dc23365cacb6c11b24be425d0ff42edb812522
-
SHA512
9efee14860e3e66ad642f1a19af63c1687d7c270ba0581a893b5a56dd4c3acb7b83070571ed918749b570941351aadb33b45f4653d106235b3c643ae6adc87b0
-
SSDEEP
1536:5ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:lBounVyFHFMqqDL2/LgHkc2
-
GandCrab payload
-
Gandcrab family
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-