General
- Target 2026-08-22_3b4f54a5992c73fce1dcc6f4c7bae668_elex_gandcrab_maze_rhadamanthys
- Size 73KB
- Sample260823-lrb1zsvgrd
- SHA256 782c812a20e9495abea951cc529927d54e7debf9b73093083b16d8119d1868fd
- MD5 3b4f54a5992c73fce1dcc6f4c7bae668
- SHA1 d91a53b8201175b86f5adf7ad2f3b135ff9dfb3d
- SHA512 a814bd0f2a7407eec5a412786c39496926069d8eca2c165a190c98df8397bfd4bbdcbd43c3be6759071c26998e2863800bba5379a0ae286e4f19a40496572659
- SSDEEP 1536:R555555555555pmgSeGDjtQhnwmmB0yXgMqqU+2bbbAV2/S2mr3IdE8mne0Avu5V:eMSjOnrmBoMqqDL2/mr3IdE8we0Avu5h
- TLSH T14673490439E08233E6E3F97BB6747DE5443A7ED817287AEF10A614BD192A1D2093578F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-22_3b4f54a5992c73fce1dcc6f4c7bae668_elex_gandcrab_maze_rhadamanthys.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_3b4f54a5992c73fce1dcc6f4c7bae668_elex_gandcrab_maze_rhadamanthys.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
gandcrab
C2
-
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
- Target 2026-08-22_3b4f54a5992c73fce1dcc6f4c7bae668_elex_gandcrab_maze_rhadamanthys
- Size 73KB
- SHA256 782c812a20e9495abea951cc529927d54e7debf9b73093083b16d8119d1868fd
- MD5 3b4f54a5992c73fce1dcc6f4c7bae668
- SHA1 d91a53b8201175b86f5adf7ad2f3b135ff9dfb3d
- SHA512 a814bd0f2a7407eec5a412786c39496926069d8eca2c165a190c98df8397bfd4bbdcbd43c3be6759071c26998e2863800bba5379a0ae286e4f19a40496572659
- SSDEEP 1536:R555555555555pmgSeGDjtQhnwmmB0yXgMqqU+2bbbAV2/S2mr3IdE8mne0Avu5V:eMSjOnrmBoMqqDL2/mr3IdE8we0Avu5h
- TLSH T14673490439E08233E6E3F97BB6747DE5443A7ED817287AEF10A614BD192A1D2093578F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.