General
-
Target
2025-01-28_37acadd9da750062648f8453dafe2b16_gandcrab
-
Size
73KB
-
Sample
250128-twjwdsxmbl
-
MD5
37acadd9da750062648f8453dafe2b16
-
SHA1
3f427f0c8c9292aa767bf7ba006576ef65b559cb
-
SHA256
96eac10c19373930cf3b6e8b57b6f4c4deadd9f02226ff8d7f986373fc284308
-
SHA512
f6362d87a6ec4378bbe4a3d8365fdf6ca1c1c9cae8945114acbae3dd62cb39c7c0c9197dd8ddf0280fcc505ecd19dc584bef73cace617dec286fa585702b9322
-
SSDEEP
1536:a55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:AMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-01-28_37acadd9da750062648f8453dafe2b16_gandcrab.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-01-28_37acadd9da750062648f8453dafe2b16_gandcrab.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-01-28_37acadd9da750062648f8453dafe2b16_gandcrab
-
Size
73KB
-
MD5
37acadd9da750062648f8453dafe2b16
-
SHA1
3f427f0c8c9292aa767bf7ba006576ef65b559cb
-
SHA256
96eac10c19373930cf3b6e8b57b6f4c4deadd9f02226ff8d7f986373fc284308
-
SHA512
f6362d87a6ec4378bbe4a3d8365fdf6ca1c1c9cae8945114acbae3dd62cb39c7c0c9197dd8ddf0280fcc505ecd19dc584bef73cace617dec286fa585702b9322
-
SSDEEP
1536:a55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:AMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-