General

  • Target

    20240929e715d339f54ed9cc3f1a1a2e0581b638gandcrab

  • Size

    73KB

  • Sample

    240929-lg3e7ayakl

  • MD5

    e715d339f54ed9cc3f1a1a2e0581b638

  • SHA1

    32f0fc66d53ae706ce097a4a91429322cd1cf778

  • SHA256

    1f092a7b1cd4e6fd7786033cda60a6bb23b5bed23c0389014e0380765f7c100c

  • SHA512

    da2ae6c35e0d34e1439f3a8e89cbb64c814f8ecab2fd29e8e9c0a300796ba0c984b7f63527d3c9a8d182781eaae995f3a481eed32d10e8f667436cf5f8b6653d

  • SSDEEP

    1536:7555555555555pmgSeGDjtQhnwmmB0y5MqqU+2bbbAV2/S2mr3IdE8mne0Avu5rE:cMSjOnrmBRMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      20240929e715d339f54ed9cc3f1a1a2e0581b638gandcrab

    • Size

      73KB

    • MD5

      e715d339f54ed9cc3f1a1a2e0581b638

    • SHA1

      32f0fc66d53ae706ce097a4a91429322cd1cf778

    • SHA256

      1f092a7b1cd4e6fd7786033cda60a6bb23b5bed23c0389014e0380765f7c100c

    • SHA512

      da2ae6c35e0d34e1439f3a8e89cbb64c814f8ecab2fd29e8e9c0a300796ba0c984b7f63527d3c9a8d182781eaae995f3a481eed32d10e8f667436cf5f8b6653d

    • SSDEEP

      1536:7555555555555pmgSeGDjtQhnwmmB0y5MqqU+2bbbAV2/S2mr3IdE8mne0Avu5rE:cMSjOnrmBRMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks