General
- Target 2026-08-22_bc7eb6c9f77c6e07994783055dad2cd7_elex_gandcrab_maze_rhadamanthys
- Size 73KB
- Sample260823-bv9fjswwd1
- SHA256 8991f411058e8ae1e155ec36c9d4a5b91a30b3592955e8bdec274a6c081b7117
- MD5 bc7eb6c9f77c6e07994783055dad2cd7
- SHA1 040363160ba695b4f1bb766724b6da5007a409c5
- SHA512 9d260b000986970a5c76eee9cfc01997fca2392d5a5aed0d95ccb22f9c2ddcad7de2d4e4f1e502abdaa2ee64f876eff0357a8ade18180d84acd2da5ff883cf71
- SSDEEP 1536:855u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:+MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
- TLSH T17873391428D08233F6E3F977F5B47DE548397E9817883AEF10A255FA28251D24D39B8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-22_bc7eb6c9f77c6e07994783055dad2cd7_elex_gandcrab_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_bc7eb6c9f77c6e07994783055dad2cd7_elex_gandcrab_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
gandcrab
C2
-
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
- Target 2026-08-22_bc7eb6c9f77c6e07994783055dad2cd7_elex_gandcrab_maze_rhadamanthys
- Size 73KB
- SHA256 8991f411058e8ae1e155ec36c9d4a5b91a30b3592955e8bdec274a6c081b7117
- MD5 bc7eb6c9f77c6e07994783055dad2cd7
- SHA1 040363160ba695b4f1bb766724b6da5007a409c5
- SHA512 9d260b000986970a5c76eee9cfc01997fca2392d5a5aed0d95ccb22f9c2ddcad7de2d4e4f1e502abdaa2ee64f876eff0357a8ade18180d84acd2da5ff883cf71
- SSDEEP 1536:855u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:+MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
- TLSH T17873391428D08233F6E3F977F5B47DE548397E9817883AEF10A255FA28251D24D39B8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.