General
-
Target
2024-06-20_22b58e02844a17f7a4033de8ba2fd6bf_gandcrab
-
Size
75KB
-
Sample
240620-ng7q1syflp
-
MD5
22b58e02844a17f7a4033de8ba2fd6bf
-
SHA1
3015f3259dc876d8067aafd9528476cc208a1949
-
SHA256
c3dbcc6180d7995c4ddad8a75bfd6301e4ec1ec353b6f72005ef7c8427e324cc
-
SHA512
6c9f13fab5f6899b36642e8375763dc0acdf395470aef4756d782c8a59efe4af24de64e33aa1da6277b37816a5243be2c0a6337469315f97eeb0d7d35c1b8c87
-
SSDEEP
1536:K55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rE:QMSjOnrmBTMqqDL2/mr3IdE8we0Avu5w
Behavioral task
behavioral1
Sample
2024-06-20_22b58e02844a17f7a4033de8ba2fd6bf_gandcrab.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-20_22b58e02844a17f7a4033de8ba2fd6bf_gandcrab.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-06-20_22b58e02844a17f7a4033de8ba2fd6bf_gandcrab
-
Size
75KB
-
MD5
22b58e02844a17f7a4033de8ba2fd6bf
-
SHA1
3015f3259dc876d8067aafd9528476cc208a1949
-
SHA256
c3dbcc6180d7995c4ddad8a75bfd6301e4ec1ec353b6f72005ef7c8427e324cc
-
SHA512
6c9f13fab5f6899b36642e8375763dc0acdf395470aef4756d782c8a59efe4af24de64e33aa1da6277b37816a5243be2c0a6337469315f97eeb0d7d35c1b8c87
-
SSDEEP
1536:K55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rE:QMSjOnrmBTMqqDL2/mr3IdE8we0Avu5w
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-