General

  • Target

    NA_NA_187149b24c7800exeexe_JC.exe

  • Size

    73KB

  • Sample

    230723-t85cvsfb24

  • MD5

    187149b24c7800bc02d34be3fa055d26

  • SHA1

    98122eaf72a88b59881fda025e67060bceb8c08e

  • SHA256

    f2a25c0e7e48b16f398279ad9baee469a70c386011433bface33c626821e4c0b

  • SHA512

    1ba67b26cefef852f3bc9203752a2bf24c62b0ebac79197ae1d1a8e266d36741d86180c85d33f03ff6ffac79a87def5dd38901e172cc61eea70de019f68c9465

  • SSDEEP

    1536:ZgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:ZMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      NA_NA_187149b24c7800exeexe_JC.exe

    • Size

      73KB

    • MD5

      187149b24c7800bc02d34be3fa055d26

    • SHA1

      98122eaf72a88b59881fda025e67060bceb8c08e

    • SHA256

      f2a25c0e7e48b16f398279ad9baee469a70c386011433bface33c626821e4c0b

    • SHA512

      1ba67b26cefef852f3bc9203752a2bf24c62b0ebac79197ae1d1a8e266d36741d86180c85d33f03ff6ffac79a87def5dd38901e172cc61eea70de019f68c9465

    • SSDEEP

      1536:ZgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:ZMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks