General

  • Target

    6773e439a28c42eb05df2717c5b8e109_gandcrab_JC.exe

  • Size

    73KB

  • Sample

    230804-wwmcmaeh3w

  • MD5

    6773e439a28c42eb05df2717c5b8e109

  • SHA1

    b5b65b5f733a887019182792ae06a7ce543c7e0f

  • SHA256

    6bdd2449605a08c14d0dacaa2e111449aaf224f2fb7a25a3f13983ccd69831b6

  • SHA512

    ee6af46602613254008cce7cd5305a066d1801c1a5a464bfb69697e9b18b46cce1119fd37383ce7fa646f0279ca18c30a7c9e2d11a0c132d94dc9f5be7a257ee

  • SSDEEP

    1536:TgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:TMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      6773e439a28c42eb05df2717c5b8e109_gandcrab_JC.exe

    • Size

      73KB

    • MD5

      6773e439a28c42eb05df2717c5b8e109

    • SHA1

      b5b65b5f733a887019182792ae06a7ce543c7e0f

    • SHA256

      6bdd2449605a08c14d0dacaa2e111449aaf224f2fb7a25a3f13983ccd69831b6

    • SHA512

      ee6af46602613254008cce7cd5305a066d1801c1a5a464bfb69697e9b18b46cce1119fd37383ce7fa646f0279ca18c30a7c9e2d11a0c132d94dc9f5be7a257ee

    • SSDEEP

      1536:TgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:TMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks