General

  • Target

    2024-10-08_e27e962fd96ba03e8c22777cd47319f5_gandcrab

  • Size

    73KB

  • Sample

    241008-scxgpswanb

  • MD5

    e27e962fd96ba03e8c22777cd47319f5

  • SHA1

    9c18758ce132ccdda20ca410f55aa315c2922690

  • SHA256

    01115ebfe5600f4dd65b0e3eb00262b05f3a5f3f0d7ef674670075dc4ba86a24

  • SHA512

    f3bf3e1cf87e0364fac0a21eabc4c9150d4c8dd9c093e4f0ad54b8856997440c4ccaa5e9438ed01fcd9c35bc47876247b5bf3a4f7b9bbbbb8f1cd8d290de086c

  • SSDEEP

    1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-08_e27e962fd96ba03e8c22777cd47319f5_gandcrab

    • Size

      73KB

    • MD5

      e27e962fd96ba03e8c22777cd47319f5

    • SHA1

      9c18758ce132ccdda20ca410f55aa315c2922690

    • SHA256

      01115ebfe5600f4dd65b0e3eb00262b05f3a5f3f0d7ef674670075dc4ba86a24

    • SHA512

      f3bf3e1cf87e0364fac0a21eabc4c9150d4c8dd9c093e4f0ad54b8856997440c4ccaa5e9438ed01fcd9c35bc47876247b5bf3a4f7b9bbbbb8f1cd8d290de086c

    • SSDEEP

      1536:055u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:mMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks