General
-
Target
2025-03-26_da5ac9f503f9e86ce6a37ddeb23b3792_gandcrab_rhadamanthys
-
Size
73KB
-
Sample
250326-h98wwsyzht
-
MD5
da5ac9f503f9e86ce6a37ddeb23b3792
-
SHA1
95120365a5e7e2c800300381514f2c0b7dde0143
-
SHA256
1abfe369c44feb035dc025131cf302ebed43121280dc3eae02eb9c83c4ded1fa
-
SHA512
62e314b139ef9a51a8566945745f2b239d80063cfcf494bf2d66d8736bd40f267b9eb44f7eff2a4020721a7f07b269e0f50edf985749cd2325e7ca30bf0babac
-
SSDEEP
1536:G55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:sMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Behavioral task
behavioral1
Sample
2025-03-26_da5ac9f503f9e86ce6a37ddeb23b3792_gandcrab_rhadamanthys.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
2025-03-26_da5ac9f503f9e86ce6a37ddeb23b3792_gandcrab_rhadamanthys.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2025-03-26_da5ac9f503f9e86ce6a37ddeb23b3792_gandcrab_rhadamanthys
-
Size
73KB
-
MD5
da5ac9f503f9e86ce6a37ddeb23b3792
-
SHA1
95120365a5e7e2c800300381514f2c0b7dde0143
-
SHA256
1abfe369c44feb035dc025131cf302ebed43121280dc3eae02eb9c83c4ded1fa
-
SHA512
62e314b139ef9a51a8566945745f2b239d80063cfcf494bf2d66d8736bd40f267b9eb44f7eff2a4020721a7f07b269e0f50edf985749cd2325e7ca30bf0babac
-
SSDEEP
1536:G55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:sMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-