General

  • Target

    2024-10-28_058e3a4b34ec36bca2d5db67329bac94_gandcrab

  • Size

    73KB

  • Sample

    241028-e13rqsyjar

  • MD5

    058e3a4b34ec36bca2d5db67329bac94

  • SHA1

    d8d7bcc0e116f9a1bca52a186211b91c94651a2e

  • SHA256

    6912d8fa24578e8621854852d9a27ce7c83fcdf36676d0b7f2342bab3fd223ca

  • SHA512

    e331ebc036e9446d6e14e6423472dfe3055c2d47f48cfd4717b8e07845e9bce5b5b61bacc5db8d4a203fe0e1de3710ead57a9ec213a56543c32e3f0be2429e84

  • SSDEEP

    1536:355u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:zMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-28_058e3a4b34ec36bca2d5db67329bac94_gandcrab

    • Size

      73KB

    • MD5

      058e3a4b34ec36bca2d5db67329bac94

    • SHA1

      d8d7bcc0e116f9a1bca52a186211b91c94651a2e

    • SHA256

      6912d8fa24578e8621854852d9a27ce7c83fcdf36676d0b7f2342bab3fd223ca

    • SHA512

      e331ebc036e9446d6e14e6423472dfe3055c2d47f48cfd4717b8e07845e9bce5b5b61bacc5db8d4a203fe0e1de3710ead57a9ec213a56543c32e3f0be2429e84

    • SSDEEP

      1536:355u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:zMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks