General

  • Target

    2024-09-27_4fd7531827e7a7a480fb8c05101292e6_gandcrab

  • Size

    73KB

  • Sample

    240927-txan4s1dpp

  • MD5

    4fd7531827e7a7a480fb8c05101292e6

  • SHA1

    86e0eda90802d808b2eba6c9131f70d69899ae31

  • SHA256

    f0dc4982d586ca0630a5e6a8c6c2c03aee27945aac998921bed8d701c5dba52f

  • SHA512

    78664815a325f32d4e0de35c644f0b8fd0d54a0aefbe90fb0497e02a43823caf917f3e363935e68789cabec6fe770879903d566560184a55ce87704bdda08407

  • SSDEEP

    1536:CgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:CMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-09-27_4fd7531827e7a7a480fb8c05101292e6_gandcrab

    • Size

      73KB

    • MD5

      4fd7531827e7a7a480fb8c05101292e6

    • SHA1

      86e0eda90802d808b2eba6c9131f70d69899ae31

    • SHA256

      f0dc4982d586ca0630a5e6a8c6c2c03aee27945aac998921bed8d701c5dba52f

    • SHA512

      78664815a325f32d4e0de35c644f0b8fd0d54a0aefbe90fb0497e02a43823caf917f3e363935e68789cabec6fe770879903d566560184a55ce87704bdda08407

    • SSDEEP

      1536:CgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdv:CMSjOnrmBbMqqMmr3IdE8we0Avu5r++N

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks