General
-
Target
2025-01-28_30ccef6c3ba8ad16c834995bfcc210b0_gandcrab
-
Size
73KB
-
Sample
250128-plbpta1pbm
-
MD5
30ccef6c3ba8ad16c834995bfcc210b0
-
SHA1
46184b72d723c232f71fcc03cbb4d52b1fa27b23
-
SHA256
13ca48a6dd42a5c7dd5292018af598e888baeb6689b8a971655b1ffa85ee90c5
-
SHA512
7624d7f624d148969103f92a8137910e72fabc0d162e364712f18ddcf49b3014c5790d96011a8f464a3e90c6ad6f45355a64cfaec086e74bc7228b3498a3d169
-
SSDEEP
1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-28_30ccef6c3ba8ad16c834995bfcc210b0_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-28_30ccef6c3ba8ad16c834995bfcc210b0_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-28_30ccef6c3ba8ad16c834995bfcc210b0_gandcrab
-
Size
73KB
-
MD5
30ccef6c3ba8ad16c834995bfcc210b0
-
SHA1
46184b72d723c232f71fcc03cbb4d52b1fa27b23
-
SHA256
13ca48a6dd42a5c7dd5292018af598e888baeb6689b8a971655b1ffa85ee90c5
-
SHA512
7624d7f624d148969103f92a8137910e72fabc0d162e364712f18ddcf49b3014c5790d96011a8f464a3e90c6ad6f45355a64cfaec086e74bc7228b3498a3d169
-
SSDEEP
1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-