General

  • Target

    8b88f6ea5a965df2b29d4191a293c685.bin

  • Size

    83KB

  • Sample

    240323-b9762abh55

  • MD5

    8b88f6ea5a965df2b29d4191a293c685

  • SHA1

    9f6712ae1fb933e2802a5157893b8e760e7472f4

  • SHA256

    190e1a2e3344409b57073a8f46301441e66ab42f926ce20be4d53050572782a4

  • SHA512

    234af84c4c5c21d6b072fe3508d9ba4b34b4c277d435ee53963bc2d5ac2c8967814569bd31e625be6d43dac414c4d9f2c95b86aa76076ee043f66ec9b57539f1

  • SSDEEP

    1536:855u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:+MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      8b88f6ea5a965df2b29d4191a293c685.bin

    • Size

      83KB

    • MD5

      8b88f6ea5a965df2b29d4191a293c685

    • SHA1

      9f6712ae1fb933e2802a5157893b8e760e7472f4

    • SHA256

      190e1a2e3344409b57073a8f46301441e66ab42f926ce20be4d53050572782a4

    • SHA512

      234af84c4c5c21d6b072fe3508d9ba4b34b4c277d435ee53963bc2d5ac2c8967814569bd31e625be6d43dac414c4d9f2c95b86aa76076ee043f66ec9b57539f1

    • SSDEEP

      1536:855u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:+MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks