Overview

overview

10

Static

static

10

2024-10-22...ab.exe

windows7-x64

6

2024-10-22...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-22_103c744ff92fd4fa795cb19e2ff18306_gandcrab

  • Size

    76KB

  • Sample

    241022-f3nahazckg

  • MD5

    103c744ff92fd4fa795cb19e2ff18306

  • SHA1

    6691a33336cfaa9e89d2a1a56ae15cdc71a50931

  • SHA256

    d2540cfc05eca1d82189683e0d8cdfa8a0a5960e6e5b2c4df612bf97e8bf99af

  • SHA512

    8abccf225e0ca4570b34cf47aeafb946e94d63f3aee7f97bc6d51a9c7477e733a92577a72462ce1e97f8da9aaf66d2ffde999f882b16489b09baf2e32f1aeaa6

  • SSDEEP

    1536:Vl55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5V:zMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-22_103c744ff92fd4fa795cb19e2ff18306_gandcrab

    • Size

      76KB

    • MD5

      103c744ff92fd4fa795cb19e2ff18306

    • SHA1

      6691a33336cfaa9e89d2a1a56ae15cdc71a50931

    • SHA256

      d2540cfc05eca1d82189683e0d8cdfa8a0a5960e6e5b2c4df612bf97e8bf99af

    • SHA512

      8abccf225e0ca4570b34cf47aeafb946e94d63f3aee7f97bc6d51a9c7477e733a92577a72462ce1e97f8da9aaf66d2ffde999f882b16489b09baf2e32f1aeaa6

    • SSDEEP

      1536:Vl55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5V:zMSjOnrmBTMqqDL2/mr3IdE8we0Avu5V

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks