Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.2023-09-06_ec753ae373fb915896347331e9e1d048_gandcrab_JC.exe

  • Size

    73KB

  • Sample

    231031-tf3nkach22

  • MD5

    ec753ae373fb915896347331e9e1d048

  • SHA1

    b0f5767e320300aa6a15f629dc0335d6bc5ac018

  • SHA256

    b43fa55a9876cf3270a49c088fe766d0b31086985c2324df0bdfcc40f0c87715

  • SHA512

    0213e2e41d7fa0b464b5ea5c940c164cbfdff38e81e90e4d0affe884fd20df355c0210e14dd345a1c7eeab0aa148a72bc31c99e2afbcf139c156c1cc4e7417fe

  • SSDEEP

    1536:8555555555555pmgSeGDjtQhnwmmB0yVMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:5MSjOnrmBdMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      NEAS.2023-09-06_ec753ae373fb915896347331e9e1d048_gandcrab_JC.exe

    • Size

      73KB

    • MD5

      ec753ae373fb915896347331e9e1d048

    • SHA1

      b0f5767e320300aa6a15f629dc0335d6bc5ac018

    • SHA256

      b43fa55a9876cf3270a49c088fe766d0b31086985c2324df0bdfcc40f0c87715

    • SHA512

      0213e2e41d7fa0b464b5ea5c940c164cbfdff38e81e90e4d0affe884fd20df355c0210e14dd345a1c7eeab0aa148a72bc31c99e2afbcf139c156c1cc4e7417fe

    • SSDEEP

      1536:8555555555555pmgSeGDjtQhnwmmB0yVMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rG:5MSjOnrmBdMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.