General

  • Target

    2024-05-03_20ae268519b48db97e94c115ee43eebd_gandcrab

  • Size

    74KB

  • Sample

    240503-e234wsfa6z

  • MD5

    20ae268519b48db97e94c115ee43eebd

  • SHA1

    f62d4df507e723fe573466889357ff5078e1a317

  • SHA256

    898ddb0aa760bd31f8e8167842d53afe43084c768939d09cff327547998952d2

  • SHA512

    601c294d29c5af3027a2ee6a0370569686b356cb9cf222dbe7f9976c34594f333b02b0e8dc275bf794f194338db4084a462e49649856a0bb0b4d33cbc8126c88

  • SSDEEP

    1536:S55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:oMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-05-03_20ae268519b48db97e94c115ee43eebd_gandcrab

    • Size

      74KB

    • MD5

      20ae268519b48db97e94c115ee43eebd

    • SHA1

      f62d4df507e723fe573466889357ff5078e1a317

    • SHA256

      898ddb0aa760bd31f8e8167842d53afe43084c768939d09cff327547998952d2

    • SHA512

      601c294d29c5af3027a2ee6a0370569686b356cb9cf222dbe7f9976c34594f333b02b0e8dc275bf794f194338db4084a462e49649856a0bb0b4d33cbc8126c88

    • SSDEEP

      1536:S55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:oMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks