Overview

overview

10

Static

static

10

9cb78ad478...JC.exe

windows7-x64

6

9cb78ad478...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    9cb78ad4783f44366a580e1b0cb066b8_gandcrab_JC.exe

  • Size

    70KB

  • Sample

    230808-vyfgesed58

  • MD5

    9cb78ad4783f44366a580e1b0cb066b8

  • SHA1

    91c6eff0f095540ff19e50a3feee50fd63d0069c

  • SHA256

    5c44dfe6d5ff886a17b32f923117c9cbd1685ef4f0692c829c8c1fa794b4e910

  • SHA512

    83bff03421cd7deb09a8e750a121d7a6deb3aeae93620d7228cbbbd462ddc8bb76f9a46a73086962494772f0cba5942c0127ecd09dced961203aa8027bbcae67

  • SSDEEP

    1536:yZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:5d5BJHMqqDL2/Ovvdr

Score
10/10
gandcrabpersistence

Malware Config

Targets

    • Target

      9cb78ad4783f44366a580e1b0cb066b8_gandcrab_JC.exe

    • Size

      70KB

    • MD5

      9cb78ad4783f44366a580e1b0cb066b8

    • SHA1

      91c6eff0f095540ff19e50a3feee50fd63d0069c

    • SHA256

      5c44dfe6d5ff886a17b32f923117c9cbd1685ef4f0692c829c8c1fa794b4e910

    • SHA512

      83bff03421cd7deb09a8e750a121d7a6deb3aeae93620d7228cbbbd462ddc8bb76f9a46a73086962494772f0cba5942c0127ecd09dced961203aa8027bbcae67

    • SSDEEP

      1536:yZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:5d5BJHMqqDL2/Ovvdr

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks