Description
Gandcrab is a Trojan horse that encrypts files on a computer.
tracking_number.pdf..exe
General
Target
Size
Sample
tracking_number.pdf..exe
217KB
210627-fl22544ngj
Score
10 /10
MD5
SHA1
SHA256
SHA512
f96e0e56a1eb44f7ae71c40fada29158
ce1faf829687bf34510def8e1abf8094c9287575
fec01ecfbc95ba154b19c1e9bb93edaa4bbed6628380b6670afe130e4b05c58b
1786afdd4f325e8086cdcbd76092741d0561c9dc00dd973b289a08977a5008e07f2145ba8f48c62c3024a1dbc9dd427eb4a925d3b39b3dcf16eaac61abf98187
Malware Config
Targets
Target
MD5
Filesize
tracking_number.pdf..exe
f96e0e56a1eb44f7ae71c40fada29158
217KB
Score
10/10
SHA1
SHA256
SHA512
ce1faf829687bf34510def8e1abf8094c9287575
fec01ecfbc95ba154b19c1e9bb93edaa4bbed6628380b6670afe130e4b05c58b
1786afdd4f325e8086cdcbd76092741d0561c9dc00dd973b289a08977a5008e07f2145ba8f48c62c3024a1dbc9dd427eb4a925d3b39b3dcf16eaac61abf98187
Tags
Signatures
-
GandCrab Payload
-
Gandcrab
-
Adds Run key to start application
Tags
TTPs
-
Enumerates connected drives
Description
Attempts to read the root path of hard drives other than the default C: drive.
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks