General

  • Target

    2024-10-28_d0125d21a03bfd407ac396616028dac0_gandcrab

  • Size

    73KB

  • Sample

    241028-fvy22asajq

  • MD5

    d0125d21a03bfd407ac396616028dac0

  • SHA1

    8ea599c5517f370e921ffcc7361c44bbd9091621

  • SHA256

    f5016052a8dc5b7e1678dc66b7be9c14cd9001a70246c0e686254d4c37d396a4

  • SHA512

    5e05438d383548e02f9e496c5df74e7bdd0fc76613c480b2c78fce5b1b03864137a87f237510ac23de5cb87e983239af817a4338d921f710d5c85a9ffebaf4f3

  • SSDEEP

    1536:J55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:BMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-28_d0125d21a03bfd407ac396616028dac0_gandcrab

    • Size

      73KB

    • MD5

      d0125d21a03bfd407ac396616028dac0

    • SHA1

      8ea599c5517f370e921ffcc7361c44bbd9091621

    • SHA256

      f5016052a8dc5b7e1678dc66b7be9c14cd9001a70246c0e686254d4c37d396a4

    • SHA512

      5e05438d383548e02f9e496c5df74e7bdd0fc76613c480b2c78fce5b1b03864137a87f237510ac23de5cb87e983239af817a4338d921f710d5c85a9ffebaf4f3

    • SSDEEP

      1536:J55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:BMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks