General
- Target 2026-08-21_51cd50fd4b9f90bec42d79a00f3bd336_elex_gandcrab_maze_rhadamanthys
- Size 73KB
- Sample260822-sg99csfd32
- SHA256 ee0ef6b992e5c4ffc00de35d2a5d6043e0f3b7c5b452aaa83ca61d7887d53f96
- MD5 51cd50fd4b9f90bec42d79a00f3bd336
- SHA1 b419d48cc722a587076f071467de2436d1738285
- SHA512 33a4480da3b666a4af1ae700d191eab7ec6b130f3fdf82e9b142164292582b38336feab4be9b10f5db59012c6a13a3fa809fc35a6f1f2a5efd1f25ed62c343d0
- SSDEEP 1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
- TLSH T18F73391428D08233F6E3F977F5B47DE548397E9817883AEF10A254FA28251D24D39B8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_51cd50fd4b9f90bec42d79a00f3bd336_elex_gandcrab_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_51cd50fd4b9f90bec42d79a00f3bd336_elex_gandcrab_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
gandcrab
C2
-
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
- Target 2026-08-21_51cd50fd4b9f90bec42d79a00f3bd336_elex_gandcrab_maze_rhadamanthys
- Size 73KB
- SHA256 ee0ef6b992e5c4ffc00de35d2a5d6043e0f3b7c5b452aaa83ca61d7887d53f96
- MD5 51cd50fd4b9f90bec42d79a00f3bd336
- SHA1 b419d48cc722a587076f071467de2436d1738285
- SHA512 33a4480da3b666a4af1ae700d191eab7ec6b130f3fdf82e9b142164292582b38336feab4be9b10f5db59012c6a13a3fa809fc35a6f1f2a5efd1f25ed62c343d0
- SSDEEP 1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
- TLSH T18F73391428D08233F6E3F977F5B47DE548397E9817883AEF10A254FA28251D24D39B8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.