General
-
Target
2024-07-02_4a0b8e4b3f72fd2a0dc8b51766ad45c8_gandcrab
-
Size
76KB
-
Sample
240702-f2jwpa1gnm
-
MD5
4a0b8e4b3f72fd2a0dc8b51766ad45c8
-
SHA1
a6ce3c2f62d69404ffd6b6ac34fd77ec8436db67
-
SHA256
534afb656ee24717bea61c8329b893012fb6f973a4fe3057cbdf814ac1a60721
-
SHA512
42e2aea3509185b1fb01d08ef7a13d12268beb8112e52080c82b4526575b0dfd4200a4777d390f6fe60cb9117f6258ef9b8359a884ecfebb55d0c1e2db4e07b8
-
SSDEEP
1536:155u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:dMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Behavioral task
behavioral1
Sample
2024-07-02_4a0b8e4b3f72fd2a0dc8b51766ad45c8_gandcrab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-07-02_4a0b8e4b3f72fd2a0dc8b51766ad45c8_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gandcrab
http://gdcbghvjyqy7jclk.onion.top/
Targets
-
-
Target
2024-07-02_4a0b8e4b3f72fd2a0dc8b51766ad45c8_gandcrab
-
Size
76KB
-
MD5
4a0b8e4b3f72fd2a0dc8b51766ad45c8
-
SHA1
a6ce3c2f62d69404ffd6b6ac34fd77ec8436db67
-
SHA256
534afb656ee24717bea61c8329b893012fb6f973a4fe3057cbdf814ac1a60721
-
SHA512
42e2aea3509185b1fb01d08ef7a13d12268beb8112e52080c82b4526575b0dfd4200a4777d390f6fe60cb9117f6258ef9b8359a884ecfebb55d0c1e2db4e07b8
-
SSDEEP
1536:155u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:dMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-