General

  • Target

    2d1ce8d0e9522dcbbcab0f2e9448e184_gandcrab_JC.exe

  • Size

    73KB

  • Sample

    230801-tcpyashb94

  • MD5

    2d1ce8d0e9522dcbbcab0f2e9448e184

  • SHA1

    8a752ce841380ed77d5b9341d1d0cbe7758fe6a5

  • SHA256

    eacace4f3feebc232d8757655e464a336d945c31d3e64c68ded3069134bfae4f

  • SHA512

    1acefde39f7334944a52b09add0d5a0d8233742641dc43f7aff4919ed9ed2f8dffe64d3942a22e1140a24f6bd4d17429970113bf90e880f5cef6c1c8638e3c34

  • SSDEEP

    1536:f555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avul:AMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2d1ce8d0e9522dcbbcab0f2e9448e184_gandcrab_JC.exe

    • Size

      73KB

    • MD5

      2d1ce8d0e9522dcbbcab0f2e9448e184

    • SHA1

      8a752ce841380ed77d5b9341d1d0cbe7758fe6a5

    • SHA256

      eacace4f3feebc232d8757655e464a336d945c31d3e64c68ded3069134bfae4f

    • SHA512

      1acefde39f7334944a52b09add0d5a0d8233742641dc43f7aff4919ed9ed2f8dffe64d3942a22e1140a24f6bd4d17429970113bf90e880f5cef6c1c8638e3c34

    • SSDEEP

      1536:f555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0Avul:AMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks