General

  • Target

    2024092668d198ba2f780371cdeaf45899c941ecgandcrab

  • Size

    73KB

  • Sample

    240926-nskevsybmg

  • MD5

    68d198ba2f780371cdeaf45899c941ec

  • SHA1

    1fb3f1dc3255df99a9a9d57d9110381bc9172abb

  • SHA256

    55d8beaf4782466b71b879f55b4f0e64e3b35a3141d7f5244451f0dbe508047f

  • SHA512

    bd6a2d5092c12ff2da75373521a2f3d346affecb44b61b52ddb7e9039adc8e7c71607a63ad820630381152c73f933fbf5bf68e72027b909d00fc8dec08d5a9ac

  • SSDEEP

    1536:kgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:kMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024092668d198ba2f780371cdeaf45899c941ecgandcrab

    • Size

      73KB

    • MD5

      68d198ba2f780371cdeaf45899c941ec

    • SHA1

      1fb3f1dc3255df99a9a9d57d9110381bc9172abb

    • SHA256

      55d8beaf4782466b71b879f55b4f0e64e3b35a3141d7f5244451f0dbe508047f

    • SHA512

      bd6a2d5092c12ff2da75373521a2f3d346affecb44b61b52ddb7e9039adc8e7c71607a63ad820630381152c73f933fbf5bf68e72027b909d00fc8dec08d5a9ac

    • SSDEEP

      1536:kgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:kMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks