General

  • Target

    2024-10-19_2b3eded5ff35c9dc757e832dda9f173b_gandcrab

  • Size

    73KB

  • Sample

    241019-md3gfs1dlg

  • MD5

    2b3eded5ff35c9dc757e832dda9f173b

  • SHA1

    248c82ecdbae5ec8553c09f803f97954f52d3e09

  • SHA256

    9cc681164471a595bced5a345051f05506b39b1403a15e83571e65c6e732dcca

  • SHA512

    762ff6afb8b4bb1dc4fd416c63d88f6fa59952420060e060ad3e0d11b1482c7a3eaa947a2ffb4ab50e3ef7351198168d0ed0506a0ddebef2738ba4989c69049a

  • SSDEEP

    1536:9555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:6MSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-19_2b3eded5ff35c9dc757e832dda9f173b_gandcrab

    • Size

      73KB

    • MD5

      2b3eded5ff35c9dc757e832dda9f173b

    • SHA1

      248c82ecdbae5ec8553c09f803f97954f52d3e09

    • SHA256

      9cc681164471a595bced5a345051f05506b39b1403a15e83571e65c6e732dcca

    • SHA512

      762ff6afb8b4bb1dc4fd416c63d88f6fa59952420060e060ad3e0d11b1482c7a3eaa947a2ffb4ab50e3ef7351198168d0ed0506a0ddebef2738ba4989c69049a

    • SSDEEP

      1536:9555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:6MSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks