General
-
Target
2025-03-26_685179a085859107c56313f70d6c8b3d_gandcrab_rhadamanthys
-
Size
73KB
-
Sample
250326-ffqr4s1lt9
-
MD5
685179a085859107c56313f70d6c8b3d
-
SHA1
873528c6b83a21739e7371068d57eef95c306244
-
SHA256
7b972cf052a5608ccd73b40c8b92052d64279761d6b52d4da251006338dcbee4
-
SHA512
6ed7a713354f0af2ede6ecbc3af834d288af3afbcfeab8eaa62b65bc3d403e346a6b8cd0c6978f8fdfdc86417ec62e3a618fb1412abc0d4422356be0fcb63994
-
SSDEEP
1536:jgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:jMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Behavioral task
behavioral1
Sample
2025-03-26_685179a085859107c56313f70d6c8b3d_gandcrab_rhadamanthys.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-03-26_685179a085859107c56313f70d6c8b3d_gandcrab_rhadamanthys.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-03-26_685179a085859107c56313f70d6c8b3d_gandcrab_rhadamanthys
-
Size
73KB
-
MD5
685179a085859107c56313f70d6c8b3d
-
SHA1
873528c6b83a21739e7371068d57eef95c306244
-
SHA256
7b972cf052a5608ccd73b40c8b92052d64279761d6b52d4da251006338dcbee4
-
SHA512
6ed7a713354f0af2ede6ecbc3af834d288af3afbcfeab8eaa62b65bc3d403e346a6b8cd0c6978f8fdfdc86417ec62e3a618fb1412abc0d4422356be0fcb63994
-
SSDEEP
1536:jgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:jMSjOnrmBbMqqMmr3IdE8we0Avu5r++N
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-