General

  • Target

    2024-10-09_981dde72d6e51db9decf2b83d9a7c673_gandcrab

  • Size

    73KB

  • Sample

    241009-x67lzssdkj

  • MD5

    981dde72d6e51db9decf2b83d9a7c673

  • SHA1

    9d26e577805b8ad61436ff4b1648d91e46693134

  • SHA256

    c61bcdc5fcb811dc52b058e77416b6a96149e2ac5496b5a5485a3f28529e5c16

  • SHA512

    4155ed8c48b711b099ad11870548edae2b95a937f00826ea0beecc6c8399e81cdf7f378c3abdd65438a1d012c0034c5c7124fbbc095cdd069eb7472a8b664299

  • SSDEEP

    1536:8555555555555pmgSeGDjtQhnwmmB0yIZqMqqU+2bbbAV2/S2mr3IdE8mne0Avu8:5MSjOnrmBJMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-09_981dde72d6e51db9decf2b83d9a7c673_gandcrab

    • Size

      73KB

    • MD5

      981dde72d6e51db9decf2b83d9a7c673

    • SHA1

      9d26e577805b8ad61436ff4b1648d91e46693134

    • SHA256

      c61bcdc5fcb811dc52b058e77416b6a96149e2ac5496b5a5485a3f28529e5c16

    • SHA512

      4155ed8c48b711b099ad11870548edae2b95a937f00826ea0beecc6c8399e81cdf7f378c3abdd65438a1d012c0034c5c7124fbbc095cdd069eb7472a8b664299

    • SSDEEP

      1536:8555555555555pmgSeGDjtQhnwmmB0yIZqMqqU+2bbbAV2/S2mr3IdE8mne0Avu8:5MSjOnrmBJMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks