gandcrab | 047d9e46f401f06f008d2c4eafcdbbb0fcf9d34c8abcce30966475397dd46784 | Triage

Sharing

General

Target

047d9e46f401f06f008d2c4eafcdbbb0fcf9d34c8abcce30966475397dd46784
Size

69KB
Sample

210302-k2jznjcb4j
MD5

bbfda7612fa1a5b1bea76ffce63b6bd8
SHA1

baa147ccb3215e52f30651e4a4e81825e8c68a6b
SHA256

047d9e46f401f06f008d2c4eafcdbbb0fcf9d34c8abcce30966475397dd46784
SHA512

13ae023751c52f417779283fd06bc7b20e05af119384e7d0b7ed1cc6397bf4d69782585b9b7db2b00ce07a67b2a0d472ed9cfae63be6d7642a6bacd68faa54a7

Score

10^/10

gandcrab persistence

Malware Config

Targets

- Target
  
  047d9e46f401f06f008d2c4eafcdbbb0fcf9d34c8abcce30966475397dd46784
- Size
  
  69KB
- MD5
  
  bbfda7612fa1a5b1bea76ffce63b6bd8
- SHA1
  
  baa147ccb3215e52f30651e4a4e81825e8c68a6b
- SHA256
  
  047d9e46f401f06f008d2c4eafcdbbb0fcf9d34c8abcce30966475397dd46784
- SHA512
  
  13ae023751c52f417779283fd06bc7b20e05af119384e7d0b7ed1cc6397bf4d69782585b9b7db2b00ce07a67b2a0d472ed9cfae63be6d7642a6bacd68faa54a7
Score

6^/10

persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2