General

  • Target

    2024-10-18_ed715b29158b906af4ff214f7e14d7a3_gandcrab

  • Size

    73KB

  • Sample

    241018-evcclazbrn

  • MD5

    ed715b29158b906af4ff214f7e14d7a3

  • SHA1

    f620278b81ca2ceb55df53aa65d8febaf6d33299

  • SHA256

    3739ce3465fe26f123092de0e20586fb8b9a02510401abd8275f62649e123ca3

  • SHA512

    aa73759cf7436f1a664c70a31a4785de61361c40adaf72cd2d8c7b9d8384f0299d7534090a9fb8e6e3fd3063b1f9984d469718a5ed2d045ea8ad8e1774aa9468

  • SSDEEP

    1536:I55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:KMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-18_ed715b29158b906af4ff214f7e14d7a3_gandcrab

    • Size

      73KB

    • MD5

      ed715b29158b906af4ff214f7e14d7a3

    • SHA1

      f620278b81ca2ceb55df53aa65d8febaf6d33299

    • SHA256

      3739ce3465fe26f123092de0e20586fb8b9a02510401abd8275f62649e123ca3

    • SHA512

      aa73759cf7436f1a664c70a31a4785de61361c40adaf72cd2d8c7b9d8384f0299d7534090a9fb8e6e3fd3063b1f9984d469718a5ed2d045ea8ad8e1774aa9468

    • SSDEEP

      1536:I55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:KMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks