Overview

overview

10

Static

static

10

35adcfbd57...42.exe

windows7_x64

6

35adcfbd57...42.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35adcfbd572af9d952b5d3fd5b281d59b80e4833eac1ec949af5bc26a7fc3242

  • Size

    70KB

  • Sample

    220626-3eed1sged6

  • MD5

    f996872736d023d29f98de5c5c81bb02

  • SHA1

    6e82a8eb165421a060f433eefdd55964dffd9b64

  • SHA256

    35adcfbd572af9d952b5d3fd5b281d59b80e4833eac1ec949af5bc26a7fc3242

  • SHA512

    f43b8c230e28250e0a88997e0448910c2d73c935f4d841ca993233cae0553351edbd378aa046a696f7164743fa760f1a6aefa0b88c30afcb4df046cba6be9150

Score
10/10
gandcrabpersistence

Malware Config

Targets

    • Target

      35adcfbd572af9d952b5d3fd5b281d59b80e4833eac1ec949af5bc26a7fc3242

    • Size

      70KB

    • MD5

      f996872736d023d29f98de5c5c81bb02

    • SHA1

      6e82a8eb165421a060f433eefdd55964dffd9b64

    • SHA256

      35adcfbd572af9d952b5d3fd5b281d59b80e4833eac1ec949af5bc26a7fc3242

    • SHA512

      f43b8c230e28250e0a88997e0448910c2d73c935f4d841ca993233cae0553351edbd378aa046a696f7164743fa760f1a6aefa0b88c30afcb4df046cba6be9150

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks