General

  • Target

    340864a3eed5a3bdce729ce42fb036168a6952f5982b982fa042f1b8cfb8664f

  • Size

    73KB

  • Sample

    221105-nsy81shgcl

  • MD5

    741f10e8b20c719ac85ce51f47c77871

  • SHA1

    28b45a3fc931b1f8571b0f4cb502d749ff930901

  • SHA256

    340864a3eed5a3bdce729ce42fb036168a6952f5982b982fa042f1b8cfb8664f

  • SHA512

    2b142736d2fcaab6e875fb25da68aae86177ef598efd47f58472a68f9578705d059d2fc66d0e08e95ccdf9edba32d611435cf8dc2c6c3af6430b6c893a017ab4

  • SSDEEP

    1536:/55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:LMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      340864a3eed5a3bdce729ce42fb036168a6952f5982b982fa042f1b8cfb8664f

    • Size

      73KB

    • MD5

      741f10e8b20c719ac85ce51f47c77871

    • SHA1

      28b45a3fc931b1f8571b0f4cb502d749ff930901

    • SHA256

      340864a3eed5a3bdce729ce42fb036168a6952f5982b982fa042f1b8cfb8664f

    • SHA512

      2b142736d2fcaab6e875fb25da68aae86177ef598efd47f58472a68f9578705d059d2fc66d0e08e95ccdf9edba32d611435cf8dc2c6c3af6430b6c893a017ab4

    • SSDEEP

      1536:/55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:LMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks