General

  • Target

    2024-10-18_3247536e1ac1874521b143ebc9cfc3c5_gandcrab

  • Size

    73KB

  • Sample

    241018-mk32kavdjj

  • MD5

    3247536e1ac1874521b143ebc9cfc3c5

  • SHA1

    112eb26233ef565e4b68e8cbcbf2ca0111cff24b

  • SHA256

    e660cd78ae5f0fdb0c8a381b27f018f0a7fb6588bb67ff010213cfaf7b581edb

  • SHA512

    051255830df469eadf894f7426ec491dd38ecc4624434aec813e9d98a78cb9b63daf4af02e3b91c243fb1577fb85486b197e347c4fdaa4f50248e7085997d16c

  • SSDEEP

    1536:/555555555555pmgSeGDjtQhnwmmB0y97MqqU+2bbbAV2/S2mr3IdE8mne0Avu5z:gMSjOnrmBtMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-18_3247536e1ac1874521b143ebc9cfc3c5_gandcrab

    • Size

      73KB

    • MD5

      3247536e1ac1874521b143ebc9cfc3c5

    • SHA1

      112eb26233ef565e4b68e8cbcbf2ca0111cff24b

    • SHA256

      e660cd78ae5f0fdb0c8a381b27f018f0a7fb6588bb67ff010213cfaf7b581edb

    • SHA512

      051255830df469eadf894f7426ec491dd38ecc4624434aec813e9d98a78cb9b63daf4af02e3b91c243fb1577fb85486b197e347c4fdaa4f50248e7085997d16c

    • SSDEEP

      1536:/555555555555pmgSeGDjtQhnwmmB0y97MqqU+2bbbAV2/S2mr3IdE8mne0Avu5z:gMSjOnrmBtMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks