Overview

overview

10

Static

static

10

2024-10-15...ab.exe

windows7-x64

6

2024-10-15...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-15_18c45a354313fad9b48ad7b859f68f6c_gandcrab

  • Size

    73KB

  • Sample

    241015-19xsqszfpb

  • MD5

    18c45a354313fad9b48ad7b859f68f6c

  • SHA1

    b4a9edc61c14542a8d0686a6c6a605ffd41daaae

  • SHA256

    e5ff3197565f22dc7de93ef43093c34b326aec3de0a8b6395b42621ecdd1e9da

  • SHA512

    2ae0f7e47a6f5c9360ff616a01f0dd938e1a6fadf81c41cd40e2b7a03e46bb5a36eab14b72aa6faee0a81632a1a78273dc4a2ac1715d849a3d616c727e94698f

  • SSDEEP

    1536:o555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r:lMSjOnrmB5MqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-15_18c45a354313fad9b48ad7b859f68f6c_gandcrab

    • Size

      73KB

    • MD5

      18c45a354313fad9b48ad7b859f68f6c

    • SHA1

      b4a9edc61c14542a8d0686a6c6a605ffd41daaae

    • SHA256

      e5ff3197565f22dc7de93ef43093c34b326aec3de0a8b6395b42621ecdd1e9da

    • SHA512

      2ae0f7e47a6f5c9360ff616a01f0dd938e1a6fadf81c41cd40e2b7a03e46bb5a36eab14b72aa6faee0a81632a1a78273dc4a2ac1715d849a3d616c727e94698f

    • SSDEEP

      1536:o555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r:lMSjOnrmB5MqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks