Overview

overview

10

Static

static

3

grandcab.exe

windows7-x64

10

grandcab.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    grandcab.bin

  • Size

    484KB

  • Sample

    231107-m11ldaff67

  • MD5

    97a449fed7d800a8a635592605ff8a67

  • SHA1

    2f339d8b2edb7c07126d9a3c37effe14966817c5

  • SHA256

    233437b647f9482a8a3ba51d0af69039bb58fb48609704a39db1f709a0e6aca6

  • SHA512

    85b4b260b801c54927f7b985d5f9fb891e44e5f72f9dcf9656684f8872339480ded94b4f3ba44d71fa491b88243f99155e3ecc7b3005fb5fbe24b1d10f47e4c3

  • SSDEEP

    12288:hEm67VkaivvtYku9hoVw7G/znXoABEg6s0u1Tw:dEivv+bGuuznXONq10

Score
10/10
gandcrabbackdoorransomware

Malware Config

Targets

    • Target

      grandcab.bin

    • Size

      484KB

    • MD5

      97a449fed7d800a8a635592605ff8a67

    • SHA1

      2f339d8b2edb7c07126d9a3c37effe14966817c5

    • SHA256

      233437b647f9482a8a3ba51d0af69039bb58fb48609704a39db1f709a0e6aca6

    • SHA512

      85b4b260b801c54927f7b985d5f9fb891e44e5f72f9dcf9656684f8872339480ded94b4f3ba44d71fa491b88243f99155e3ecc7b3005fb5fbe24b1d10f47e4c3

    • SSDEEP

      12288:hEm67VkaivvtYku9hoVw7G/znXoABEg6s0u1Tw:dEivv+bGuuznXONq10

    Score
    10/10
    gandcrabbackdoorransomware

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks