Overview

overview

10

Static

static

10

2024-04-27...ab.exe

windows7-x64

6

2024-04-27...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_24919643540c214323ab51c25098bc4c_gandcrab

  • Size

    74KB

  • Sample

    240427-2b18yahh55

  • MD5

    24919643540c214323ab51c25098bc4c

  • SHA1

    6164d1dd531bd601751875cff3135bcb3af79b91

  • SHA256

    11547a3d94e29e30071c7be683c11d6c99ad9825de81b9bcb355956d554dead6

  • SHA512

    361a0fef6bd094eac83abb403866396ae70cd4284cd320fe19c5acac40e9cfb83315547b9a10b851edbcc8bffa7e325d9e5c63c4de0db01bb8d15e2a0568b3d7

  • SSDEEP

    1536:x55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:5MSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

Score
10/10
gandcrabpersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-04-27_24919643540c214323ab51c25098bc4c_gandcrab

    • Size

      74KB

    • MD5

      24919643540c214323ab51c25098bc4c

    • SHA1

      6164d1dd531bd601751875cff3135bcb3af79b91

    • SHA256

      11547a3d94e29e30071c7be683c11d6c99ad9825de81b9bcb355956d554dead6

    • SHA512

      361a0fef6bd094eac83abb403866396ae70cd4284cd320fe19c5acac40e9cfb83315547b9a10b851edbcc8bffa7e325d9e5c63c4de0db01bb8d15e2a0568b3d7

    • SSDEEP

      1536:x55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:5MSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks