General

  • Target

    2024-03-24_3183308d9ba2ac846a8368140d31adbe_gandcrab

  • Size

    73KB

  • Sample

    240324-ashpdahd6t

  • MD5

    3183308d9ba2ac846a8368140d31adbe

  • SHA1

    5933a8f4d0decd5d3ca9e931c99bd12c7cef6df6

  • SHA256

    8bb883e31d4b47eae6a18789551a4735002f52c60e3ccab57148276abd3e252a

  • SHA512

    55601dfb2c72b21e0ae17775409044cc21e0f565ac59ea3807045f8e466a461ef89bf8c8c7edc118bd059f238b82ac5bbb31f51b6eb4bcbd1f511077d22c0846

  • SSDEEP

    1536:n55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:DMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-03-24_3183308d9ba2ac846a8368140d31adbe_gandcrab

    • Size

      73KB

    • MD5

      3183308d9ba2ac846a8368140d31adbe

    • SHA1

      5933a8f4d0decd5d3ca9e931c99bd12c7cef6df6

    • SHA256

      8bb883e31d4b47eae6a18789551a4735002f52c60e3ccab57148276abd3e252a

    • SHA512

      55601dfb2c72b21e0ae17775409044cc21e0f565ac59ea3807045f8e466a461ef89bf8c8c7edc118bd059f238b82ac5bbb31f51b6eb4bcbd1f511077d22c0846

    • SSDEEP

      1536:n55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:DMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks