General

  • Target

    2024-10-19_08e2690ff657f4cba8adb73d1bc6cd08_gandcrab

  • Size

    73KB

  • Sample

    241019-e3f1razajl

  • MD5

    08e2690ff657f4cba8adb73d1bc6cd08

  • SHA1

    9f7563e0c26001d6bc1fbd1abb44c825ba3cc6b8

  • SHA256

    110b2b3f58faeede57b81bfd8b28375478c273377b7f8edce2fb59dbe71de435

  • SHA512

    a91d69bd0a7d8990279fb4ebf42f9940e0aa0ad042d95752fd1675a40c8e3bbf07f9638e5520a8ee6b03b12ae5780ca11a243bbd9c75d0ec79dc7e83e28a6d31

  • SSDEEP

    1536:T555555555555pmgSeGDjtQhnwmmB0yXMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rK:UMSjOnrmBPMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-19_08e2690ff657f4cba8adb73d1bc6cd08_gandcrab

    • Size

      73KB

    • MD5

      08e2690ff657f4cba8adb73d1bc6cd08

    • SHA1

      9f7563e0c26001d6bc1fbd1abb44c825ba3cc6b8

    • SHA256

      110b2b3f58faeede57b81bfd8b28375478c273377b7f8edce2fb59dbe71de435

    • SHA512

      a91d69bd0a7d8990279fb4ebf42f9940e0aa0ad042d95752fd1675a40c8e3bbf07f9638e5520a8ee6b03b12ae5780ca11a243bbd9c75d0ec79dc7e83e28a6d31

    • SSDEEP

      1536:T555555555555pmgSeGDjtQhnwmmB0yXMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rK:UMSjOnrmBPMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks