Overview

overview

10

Static

static

10

2024-10-20...ab.exe

windows7-x64

6

2024-10-20...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-20_5818e4d3dcd75fdfadaa8b451d1e27c9_gandcrab

  • Size

    73KB

  • Sample

    241020-g8fchsteng

  • MD5

    5818e4d3dcd75fdfadaa8b451d1e27c9

  • SHA1

    572d8d0d2b9cf02b6666658b3972e5f4083be147

  • SHA256

    2fe39848522a033d1a292afe9e41598f24c6287f63293d10f67e0f5cf6f042ab

  • SHA512

    a2603b1c6b57806d3e6630c9120474c4c8a254fc4014d89d455e53373fa0b9cffa399bcdce92abe52d0ef7eae7bc3c1eb7156204ebb18dd18e5bb934919a4ee1

  • SSDEEP

    1536:R555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:eMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-20_5818e4d3dcd75fdfadaa8b451d1e27c9_gandcrab

    • Size

      73KB

    • MD5

      5818e4d3dcd75fdfadaa8b451d1e27c9

    • SHA1

      572d8d0d2b9cf02b6666658b3972e5f4083be147

    • SHA256

      2fe39848522a033d1a292afe9e41598f24c6287f63293d10f67e0f5cf6f042ab

    • SHA512

      a2603b1c6b57806d3e6630c9120474c4c8a254fc4014d89d455e53373fa0b9cffa399bcdce92abe52d0ef7eae7bc3c1eb7156204ebb18dd18e5bb934919a4ee1

    • SSDEEP

      1536:R555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:eMSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks