General
-
Target
2024-06-19_cdac1064921d608ce2db682bfd25f089_gandcrab
-
Size
73KB
-
Sample
240619-nq3testgnq
-
MD5
cdac1064921d608ce2db682bfd25f089
-
SHA1
808e4cd09b92d1a9b795b6ce180de1be2e1af449
-
SHA256
a15467372c4685b58ad4acd38eed7979b5835e6110e5047fb28f48cbeddff904
-
SHA512
fb1867f7076e22b2d26e490417ca8baf29141057fc9091f4a32965c1ebd606efa82212b2a8d5073d0d4496a0374b1ad90a21d4fe497d4ed0f7c343c8f57cea01
-
SSDEEP
1536:U55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:GMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Behavioral task
behavioral1
Sample
2024-06-19_cdac1064921d608ce2db682bfd25f089_gandcrab.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-19_cdac1064921d608ce2db682bfd25f089_gandcrab.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-06-19_cdac1064921d608ce2db682bfd25f089_gandcrab
-
Size
73KB
-
MD5
cdac1064921d608ce2db682bfd25f089
-
SHA1
808e4cd09b92d1a9b795b6ce180de1be2e1af449
-
SHA256
a15467372c4685b58ad4acd38eed7979b5835e6110e5047fb28f48cbeddff904
-
SHA512
fb1867f7076e22b2d26e490417ca8baf29141057fc9091f4a32965c1ebd606efa82212b2a8d5073d0d4496a0374b1ad90a21d4fe497d4ed0f7c343c8f57cea01
-
SSDEEP
1536:U55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:GMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-