General

  • Target

    c21f07d7946f152fa0955ac702cfabd3a137d238278e77690dd239fc9a3a5394N

  • Size

    73KB

  • Sample

    241028-n9gqasyhkm

  • MD5

    d2e5d44c51b39a771111a079208585b0

  • SHA1

    9deaee87cf43522060d411d1bcbd7bcbb011cd78

  • SHA256

    c21f07d7946f152fa0955ac702cfabd3a137d238278e77690dd239fc9a3a5394

  • SHA512

    3e5d82c92b9587d6262044214193c2357fc4e022ed5ba50e7a6b5e82d051a905e23dba32a14874bb4f1b8e0ab6031014d2d01e07196d37506e6994075be28c3c

  • SSDEEP

    1536:5555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ri:GMSjOnrmB5MqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      c21f07d7946f152fa0955ac702cfabd3a137d238278e77690dd239fc9a3a5394N

    • Size

      73KB

    • MD5

      d2e5d44c51b39a771111a079208585b0

    • SHA1

      9deaee87cf43522060d411d1bcbd7bcbb011cd78

    • SHA256

      c21f07d7946f152fa0955ac702cfabd3a137d238278e77690dd239fc9a3a5394

    • SHA512

      3e5d82c92b9587d6262044214193c2357fc4e022ed5ba50e7a6b5e82d051a905e23dba32a14874bb4f1b8e0ab6031014d2d01e07196d37506e6994075be28c3c

    • SSDEEP

      1536:5555555555555pmgSeGDjtQhnwmmB0yRMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ri:GMSjOnrmB5MqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks