General

  • Target

    20240929d14b2442037f4636fb1dc4bad9da15f4gandcrab

  • Size

    76KB

  • Sample

    240929-srr6jazaqp

  • MD5

    d14b2442037f4636fb1dc4bad9da15f4

  • SHA1

    fa24d15c91d4fb2fc53653cc38c6da2ecb46c4a9

  • SHA256

    478afaa0c27c56f5f9b91593d8be0d7babf22be3d8dbba183fe28ba9d927115c

  • SHA512

    1320d17af87af3d278e41e5524ae676be446b734a963a1fdc2af8a7ecc2d5f5977baf6ec80f880d1e6b61272ccef0e5b59c2ecef3fcf153bc7a88df0b5c25bc1

  • SSDEEP

    1536:H55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r/:jMSjOnrmBTMqqDL2/mr3IdE8we0Avu57

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      20240929d14b2442037f4636fb1dc4bad9da15f4gandcrab

    • Size

      76KB

    • MD5

      d14b2442037f4636fb1dc4bad9da15f4

    • SHA1

      fa24d15c91d4fb2fc53653cc38c6da2ecb46c4a9

    • SHA256

      478afaa0c27c56f5f9b91593d8be0d7babf22be3d8dbba183fe28ba9d927115c

    • SHA512

      1320d17af87af3d278e41e5524ae676be446b734a963a1fdc2af8a7ecc2d5f5977baf6ec80f880d1e6b61272ccef0e5b59c2ecef3fcf153bc7a88df0b5c25bc1

    • SSDEEP

      1536:H55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r/:jMSjOnrmBTMqqDL2/mr3IdE8we0Avu57

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks