Overview

overview

10

Static

static

8dd7f13781...3a.exe

windows7-x64

10

8dd7f13781...3a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8dd7f137812f47bba55adab522b2bd3a

  • Size

    244KB

  • Sample

    220920-vg6maadhh3

  • MD5

    8dd7f137812f47bba55adab522b2bd3a

  • SHA1

    352d0e18378e68f176590742f6e31318b2ae32b7

  • SHA256

    e014a74f578198d9df6935a447e96e53b3ddb19c95b4e4065807b923de189722

  • SHA512

    68e5dde036850de5c7079ffff0c127b99161297eb5d7a5646c0ec6471112fae42ac544b0024257af68c612540a1f4f9225cd164bf16e87fbfdd4d32c5584f8ca

  • SSDEEP

    3072:Fi6ItbhTm5EJBBEDCNVuNwXiNtoU39qzNAjv2bZxglSv1OrSjfXw2ODF:Fi6ItdLjcCLSNmWt2bZQSdOrSjfXw2qF

Score
10/10
gandcrabbackdoorpersistenceransomware

Malware Config

Targets

    • Target

      8dd7f137812f47bba55adab522b2bd3a

    • Size

      244KB

    • MD5

      8dd7f137812f47bba55adab522b2bd3a

    • SHA1

      352d0e18378e68f176590742f6e31318b2ae32b7

    • SHA256

      e014a74f578198d9df6935a447e96e53b3ddb19c95b4e4065807b923de189722

    • SHA512

      68e5dde036850de5c7079ffff0c127b99161297eb5d7a5646c0ec6471112fae42ac544b0024257af68c612540a1f4f9225cd164bf16e87fbfdd4d32c5584f8ca

    • SSDEEP

      3072:Fi6ItbhTm5EJBBEDCNVuNwXiNtoU39qzNAjv2bZxglSv1OrSjfXw2ODF:Fi6ItdLjcCLSNmWt2bZQSdOrSjfXw2qF

    Score
    10/10
    gandcrabbackdoorpersistenceransomware

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks