Overview

overview

10

Static

static

10

5d81730111...JC.exe

windows7-x64

6

5d81730111...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d817301113fbd4db3782c40db036ea2_gandcrab_JC.exe

  • Size

    70KB

  • Sample

    230804-th64rsdd9w

  • MD5

    5d817301113fbd4db3782c40db036ea2

  • SHA1

    bd8f124783565163b86fa1a12330c3feb0be3bf4

  • SHA256

    56f19346580d24c9fe1d7e20ca3e4bc8f1ef2bace44b3bd1e277c9a15b41823e

  • SHA512

    cfc5a9038475401388d06e05d71a3fd7671c106dc1b4f8ba1b29aa3933c6c20436c3bdb03c2470dc67a837179feecdc9a979f9791fac630a02a92eecbac26059

  • SSDEEP

    1536:7ZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:6d5BJHMqqDL2/Ovvdr

Score
10/10
gandcrabpersistence

Malware Config

Targets

    • Target

      5d817301113fbd4db3782c40db036ea2_gandcrab_JC.exe

    • Size

      70KB

    • MD5

      5d817301113fbd4db3782c40db036ea2

    • SHA1

      bd8f124783565163b86fa1a12330c3feb0be3bf4

    • SHA256

      56f19346580d24c9fe1d7e20ca3e4bc8f1ef2bace44b3bd1e277c9a15b41823e

    • SHA512

      cfc5a9038475401388d06e05d71a3fd7671c106dc1b4f8ba1b29aa3933c6c20436c3bdb03c2470dc67a837179feecdc9a979f9791fac630a02a92eecbac26059

    • SSDEEP

      1536:7ZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:6d5BJHMqqDL2/Ovvdr

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks