Overview

overview

10

Static

static

10

2024-10-09...ab.exe

windows7-x64

6

2024-10-09...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-09_061d28cfdaf8c95c0a3bf07c33419d4e_gandcrab

  • Size

    73KB

  • Sample

    241009-rp4wwawhmq

  • MD5

    061d28cfdaf8c95c0a3bf07c33419d4e

  • SHA1

    1d6c4b04882186a5efd2b9e37629ec47ec357588

  • SHA256

    93489fa99ac6f9d900106df2b4cde752ead8e678c2e275939c9833b4cb74ada1

  • SHA512

    d4eee3001e484dfe5227ffac29ef52c26f8f05d51829ac3ff299055c94cde3ede8919b2fd5a37ca3d7d27d6e796424582cf7237b5df1b2e0ba0415d7ae2b2b9b

  • SSDEEP

    1536:o555555555555pmgSeGDjtQhnwmmB0yfMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rD:lMSjOnrmBnMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-09_061d28cfdaf8c95c0a3bf07c33419d4e_gandcrab

    • Size

      73KB

    • MD5

      061d28cfdaf8c95c0a3bf07c33419d4e

    • SHA1

      1d6c4b04882186a5efd2b9e37629ec47ec357588

    • SHA256

      93489fa99ac6f9d900106df2b4cde752ead8e678c2e275939c9833b4cb74ada1

    • SHA512

      d4eee3001e484dfe5227ffac29ef52c26f8f05d51829ac3ff299055c94cde3ede8919b2fd5a37ca3d7d27d6e796424582cf7237b5df1b2e0ba0415d7ae2b2b9b

    • SSDEEP

      1536:o555555555555pmgSeGDjtQhnwmmB0yfMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rD:lMSjOnrmBnMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks