General

  • Target

    b0d8c2d49156655f41058583c4d2b833_gandcrab_JC.exe

  • Size

    73KB

  • Sample

    230827-tlv6nsdb8x

  • MD5

    b0d8c2d49156655f41058583c4d2b833

  • SHA1

    ce51b6d01cb92d29e3639fe31dc8f218794547be

  • SHA256

    27a2fcda83a04016c357def08c631174806226653bfca2ed40f0ee28d73a6497

  • SHA512

    f7302a681e3a56367fc0b06ba5d705bd18577dc49350c4984b83f29f8c70acd5af5c1df79e40b342535bfcc858b7ef3d69ca365cec1badd1a29c942896938bb5

  • SSDEEP

    1536:ggSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:gMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      b0d8c2d49156655f41058583c4d2b833_gandcrab_JC.exe

    • Size

      73KB

    • MD5

      b0d8c2d49156655f41058583c4d2b833

    • SHA1

      ce51b6d01cb92d29e3639fe31dc8f218794547be

    • SHA256

      27a2fcda83a04016c357def08c631174806226653bfca2ed40f0ee28d73a6497

    • SHA512

      f7302a681e3a56367fc0b06ba5d705bd18577dc49350c4984b83f29f8c70acd5af5c1df79e40b342535bfcc858b7ef3d69ca365cec1badd1a29c942896938bb5

    • SSDEEP

      1536:ggSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:gMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks