Resubmissions

07-05-2024 11:10

240507-m9sl5aga57 10

07-05-2024 10:38

240507-mpngnsfb39 10

General

  • Target

    2024-05-07_2b7278c9f6ae67db00a175fb51fa7a1a_gandcrab

  • Size

    88KB

  • Sample

    240507-mpngnsfb39

  • MD5

    2b7278c9f6ae67db00a175fb51fa7a1a

  • SHA1

    061a7b53a3f013024d2d61a59d0a6872792ec9af

  • SHA256

    dc634338fb5ee7a90b08a4ab6996f8152b57be1ebf9ca8e864a94925e6dbfd54

  • SHA512

    e0fc8c4a65e8a632703b92951a757e20c14ec2b0fd3642f948c0f276a232516b3542194edadfc6a644d78435cd3b4720c79d7cec8f3b2c12327f731964403dde

  • SSDEEP

    1536:8rsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:8jDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-05-07_2b7278c9f6ae67db00a175fb51fa7a1a_gandcrab

    • Size

      88KB

    • MD5

      2b7278c9f6ae67db00a175fb51fa7a1a

    • SHA1

      061a7b53a3f013024d2d61a59d0a6872792ec9af

    • SHA256

      dc634338fb5ee7a90b08a4ab6996f8152b57be1ebf9ca8e864a94925e6dbfd54

    • SHA512

      e0fc8c4a65e8a632703b92951a757e20c14ec2b0fd3642f948c0f276a232516b3542194edadfc6a644d78435cd3b4720c79d7cec8f3b2c12327f731964403dde

    • SSDEEP

      1536:8rsWDX9pwpQUMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:8jDX9pwzMqqDL2/mr3IdE8we0Avu5r+g

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks