General

  • Target

    5c3cab097c17243f6e14b88d118305ad_gandcrab_JC.exe

  • Size

    73KB

  • Sample

    230821-syf2vadg49

  • MD5

    5c3cab097c17243f6e14b88d118305ad

  • SHA1

    ddda4e67955043fce865a56b34e8626412b3d44c

  • SHA256

    458c24c00765d929d5c009b3dedf9b36f0c518ec884b9f4c536cdb5d52a74028

  • SHA512

    bce0627ee76579a709118ab09dffe32475d9e7591256d32c3a754c4d4ffa4a09d7e07b9144f5bfdaecbcf821763d358aaee82f5c94146a8e66c7db7606b0ac2f

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0yeMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r8:gMSjOnrmBWMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      5c3cab097c17243f6e14b88d118305ad_gandcrab_JC.exe

    • Size

      73KB

    • MD5

      5c3cab097c17243f6e14b88d118305ad

    • SHA1

      ddda4e67955043fce865a56b34e8626412b3d44c

    • SHA256

      458c24c00765d929d5c009b3dedf9b36f0c518ec884b9f4c536cdb5d52a74028

    • SHA512

      bce0627ee76579a709118ab09dffe32475d9e7591256d32c3a754c4d4ffa4a09d7e07b9144f5bfdaecbcf821763d358aaee82f5c94146a8e66c7db7606b0ac2f

    • SSDEEP

      1536:/555555555555pmgSeGDjtQhnwmmB0yeMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r8:gMSjOnrmBWMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks