General

  • Target

    2024-03-02_ad687c46e950af8941acfd1faade4ee1_gandcrab

  • Size

    73KB

  • Sample

    240302-vtq3csfg68

  • MD5

    ad687c46e950af8941acfd1faade4ee1

  • SHA1

    d29f2c97292b6bfab14278c6a89f9f0632347cbc

  • SHA256

    0ee4ac59eb666230b26a379de8606f6e30e5c3ef14c32af969c111dac1ae1f5f

  • SHA512

    a9e4dd66ccc6fc5805147e9dc0f556995a3cc85597521972abb412f6267db14d664fe450d7e39114c1279f065b80002e9c0023e104536949e0df6cbefda2167c

  • SSDEEP

    1536:e55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:0MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-03-02_ad687c46e950af8941acfd1faade4ee1_gandcrab

    • Size

      73KB

    • MD5

      ad687c46e950af8941acfd1faade4ee1

    • SHA1

      d29f2c97292b6bfab14278c6a89f9f0632347cbc

    • SHA256

      0ee4ac59eb666230b26a379de8606f6e30e5c3ef14c32af969c111dac1ae1f5f

    • SHA512

      a9e4dd66ccc6fc5805147e9dc0f556995a3cc85597521972abb412f6267db14d664fe450d7e39114c1279f065b80002e9c0023e104536949e0df6cbefda2167c

    • SSDEEP

      1536:e55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:0MSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks