General

  • Target

    2024-04-11_fad0a84806c045242e78f96ed470cbb9_karagany_mafia

  • Size

    250KB

  • Sample

    240411-jvf31aad2x

  • MD5

    fad0a84806c045242e78f96ed470cbb9

  • SHA1

    4b9c54c000490c84ef70609e79bf0bdd48d14ea9

  • SHA256

    b711088a08e0e5a81a5d3752c6763a70b3c1cee0ce67856bfc940b416a9a3062

  • SHA512

    76ab75768812cb578f10e85c4f12888459cee2de04b79d895d1e13f8233cda66611d3ea533f0e18fce77c153cb74e6d74fb50492e73ca0020909bd4b7adfe1be

  • SSDEEP

    3072:P/yK5d0Gj0+nY3uEBLvBNfdUR2/qFnB8o2+vU3WuvIBuj00nReaXkuSQ7cdOd3:P/y20Gj0r+EBFrkvlU3RvIUDOIN

Malware Config

Targets

    • Target

      2024-04-11_fad0a84806c045242e78f96ed470cbb9_karagany_mafia

    • Size

      250KB

    • MD5

      fad0a84806c045242e78f96ed470cbb9

    • SHA1

      4b9c54c000490c84ef70609e79bf0bdd48d14ea9

    • SHA256

      b711088a08e0e5a81a5d3752c6763a70b3c1cee0ce67856bfc940b416a9a3062

    • SHA512

      76ab75768812cb578f10e85c4f12888459cee2de04b79d895d1e13f8233cda66611d3ea533f0e18fce77c153cb74e6d74fb50492e73ca0020909bd4b7adfe1be

    • SSDEEP

      3072:P/yK5d0Gj0+nY3uEBLvBNfdUR2/qFnB8o2+vU3WuvIBuj00nReaXkuSQ7cdOd3:P/y20Gj0r+EBFrkvlU3RvIUDOIN

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

    • Detects Reflective DLL injection artifacts

    • Detects ransomware indicator

    • Gandcrab Payload

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks