General

  • Target

    2024-03-22_fd273f628ce6446994a0cc3cf974cb1b_karagany_mafia

  • Size

    308KB

  • Sample

    240322-rj8ymsce55

  • MD5

    fd273f628ce6446994a0cc3cf974cb1b

  • SHA1

    59a980f630a7cef3328cd27d9ab33de3817bd9ef

  • SHA256

    72d02f8c21457cb5c3ca5c2f7e7fbf4275f756850f740d7d77754ee6e7a70a79

  • SHA512

    cb40562af8a58bffef9de08abdcdda22ab31455db83fbab0f6ebb55cd243dfdf9a936905d030cac33d6deb25a4c746a20ff972308a9c1554b3aeaaf136da0b6b

  • SSDEEP

    6144:9zL7ShWDLVzVNam6GxI29dqG3KdYAYqTuPZp:zDHNam62ZdKmZmuPH

Malware Config

Targets

    • Target

      2024-03-22_fd273f628ce6446994a0cc3cf974cb1b_karagany_mafia

    • Size

      308KB

    • MD5

      fd273f628ce6446994a0cc3cf974cb1b

    • SHA1

      59a980f630a7cef3328cd27d9ab33de3817bd9ef

    • SHA256

      72d02f8c21457cb5c3ca5c2f7e7fbf4275f756850f740d7d77754ee6e7a70a79

    • SHA512

      cb40562af8a58bffef9de08abdcdda22ab31455db83fbab0f6ebb55cd243dfdf9a936905d030cac33d6deb25a4c746a20ff972308a9c1554b3aeaaf136da0b6b

    • SSDEEP

      6144:9zL7ShWDLVzVNam6GxI29dqG3KdYAYqTuPZp:zDHNam62ZdKmZmuPH

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

    • Detects Reflective DLL injection artifacts

    • Detects ransomware indicator

    • Gandcrab Payload

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks