Overview

overview

10

Static

static

10

2023-08-23...JC.exe

windows7-x64

6

2023-08-23...JC.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2023-08-23_184becb68124bf04cb59b78847a22858_gandcrab_JC.exe

  • Size

    73KB

  • Sample

    230903-vaq81sba7x

  • MD5

    184becb68124bf04cb59b78847a22858

  • SHA1

    b86ea04a508389af648305d405b29b1ba1afbafe

  • SHA256

    f2ed5a26d428855479f380e0a7d71961386878e77a83d871d5aaa040685614d8

  • SHA512

    79de9e4518e7dac8d688b4a6048d595f1c62dbb191c729a676825f9d453d65a18d98e67339ea786e3fa1dc97c0610b907a2d63eec1f56e58e658413f8e5a98db

  • SSDEEP

    1536:1555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:SMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrabpersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2023-08-23_184becb68124bf04cb59b78847a22858_gandcrab_JC.exe

    • Size

      73KB

    • MD5

      184becb68124bf04cb59b78847a22858

    • SHA1

      b86ea04a508389af648305d405b29b1ba1afbafe

    • SHA256

      f2ed5a26d428855479f380e0a7d71961386878e77a83d871d5aaa040685614d8

    • SHA512

      79de9e4518e7dac8d688b4a6048d595f1c62dbb191c729a676825f9d453d65a18d98e67339ea786e3fa1dc97c0610b907a2d63eec1f56e58e658413f8e5a98db

    • SSDEEP

      1536:1555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r2:SMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks