General

  • Target

    2024-05-26_2efd4dc5dfc71aade92768936f283ef4_gandcrab

  • Size

    73KB

  • Sample

    240526-h89rssbc2y

  • MD5

    2efd4dc5dfc71aade92768936f283ef4

  • SHA1

    b37e56e31cc0f78041befd336224ac86de7969f8

  • SHA256

    cfa3e0840fe120fb6dfbb24da4710fd95a6300df13fbb6ee865c2f4160459465

  • SHA512

    f9351ec4abc277afa3a88b08b341f9c97046fa1f98e149f52eb766c786f27fd601943a30438a7e28315a6b3d8c3dbe29dff2caf1cec04ca13254f26d843e6abd

  • SSDEEP

    1536:d555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0AvuN:aMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-05-26_2efd4dc5dfc71aade92768936f283ef4_gandcrab

    • Size

      73KB

    • MD5

      2efd4dc5dfc71aade92768936f283ef4

    • SHA1

      b37e56e31cc0f78041befd336224ac86de7969f8

    • SHA256

      cfa3e0840fe120fb6dfbb24da4710fd95a6300df13fbb6ee865c2f4160459465

    • SHA512

      f9351ec4abc277afa3a88b08b341f9c97046fa1f98e149f52eb766c786f27fd601943a30438a7e28315a6b3d8c3dbe29dff2caf1cec04ca13254f26d843e6abd

    • SSDEEP

      1536:d555555555555pmgSeGDjtQhnwmmB0ypXdMqqU+2bbbAV2/S2mr3IdE8mne0AvuN:aMSjOnrmBBtMqqDL2/mr3IdE8we0Avuj

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks