General

  • Target

    2024-05-03_932aed2ab61370a3baf36d39c1da5df8_gandcrab

  • Size

    74KB

  • Sample

    240503-ghtr8aaf93

  • MD5

    932aed2ab61370a3baf36d39c1da5df8

  • SHA1

    b035b412d639b09425cb4a9752eb7928d77c15e8

  • SHA256

    f3f8d3d864ac2e2f7a383c8b4066959bc71dae81e60afbd6cc384c8cdfba6183

  • SHA512

    423d0f8a3187126d5e6a6df3f32e5253aacee5af1ce27f1a84821aa6b38864956694c0db3517e71550634d63fb18915a7a0dee73833a7dd9456a217ab7eb67d8

  • SSDEEP

    1536:Z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:xMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-05-03_932aed2ab61370a3baf36d39c1da5df8_gandcrab

    • Size

      74KB

    • MD5

      932aed2ab61370a3baf36d39c1da5df8

    • SHA1

      b035b412d639b09425cb4a9752eb7928d77c15e8

    • SHA256

      f3f8d3d864ac2e2f7a383c8b4066959bc71dae81e60afbd6cc384c8cdfba6183

    • SHA512

      423d0f8a3187126d5e6a6df3f32e5253aacee5af1ce27f1a84821aa6b38864956694c0db3517e71550634d63fb18915a7a0dee73833a7dd9456a217ab7eb67d8

    • SSDEEP

      1536:Z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rS:xMSjOnrmBTMqqDL2/mr3IdE8we0Avu5O

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks