General
-
Target
2025-01-28_32dabcd62ff17f07e743035b928ec1f9_gandcrab
-
Size
73KB
-
Sample
250128-stvpfawkcj
-
MD5
32dabcd62ff17f07e743035b928ec1f9
-
SHA1
a511d3d4f8bc276376c0f0ed090cfc41e8edede9
-
SHA256
06183edd3be74768fbdf05429df715f3881472bc97a5f5627b07d24a99050ee0
-
SHA512
46d20fa267285a9e9be8aae8a021a76eebdec75cae2d0c96d344c77b51d74d25612f32c73240af00398b0801ff603118e6b39d903674b5ed18effdf504a2fd79
-
SSDEEP
1536:X55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:TMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2025-01-28_32dabcd62ff17f07e743035b928ec1f9_gandcrab.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2025-01-28_32dabcd62ff17f07e743035b928ec1f9_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-28_32dabcd62ff17f07e743035b928ec1f9_gandcrab
-
Size
73KB
-
MD5
32dabcd62ff17f07e743035b928ec1f9
-
SHA1
a511d3d4f8bc276376c0f0ed090cfc41e8edede9
-
SHA256
06183edd3be74768fbdf05429df715f3881472bc97a5f5627b07d24a99050ee0
-
SHA512
46d20fa267285a9e9be8aae8a021a76eebdec75cae2d0c96d344c77b51d74d25612f32c73240af00398b0801ff603118e6b39d903674b5ed18effdf504a2fd79
-
SSDEEP
1536:X55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:TMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-