General

  • Target

    2024-03-23_06b484da653b83f7d3e3927543078aac_gandcrab

  • Size

    83KB

  • Sample

    240323-3c9gdaea43

  • MD5

    06b484da653b83f7d3e3927543078aac

  • SHA1

    2fbe1a933404841de2e416793bb0edb1736eb6b5

  • SHA256

    23ffd987c9e179b98a53bace86291f69eea69f7f697ca502eb924623c92649c2

  • SHA512

    dc1924413e80fc7fb9b033a0b6b02bfc42f24d19c4d236c17e4193dcb0ed909d7fb3840c69b6fa49006aa7e229696b4255f86d41b5b26f04072aed8f3c7b6d3d

  • SSDEEP

    1536:Y55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:6MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-03-23_06b484da653b83f7d3e3927543078aac_gandcrab

    • Size

      83KB

    • MD5

      06b484da653b83f7d3e3927543078aac

    • SHA1

      2fbe1a933404841de2e416793bb0edb1736eb6b5

    • SHA256

      23ffd987c9e179b98a53bace86291f69eea69f7f697ca502eb924623c92649c2

    • SHA512

      dc1924413e80fc7fb9b033a0b6b02bfc42f24d19c4d236c17e4193dcb0ed909d7fb3840c69b6fa49006aa7e229696b4255f86d41b5b26f04072aed8f3c7b6d3d

    • SSDEEP

      1536:Y55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:6MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks