General

  • Target

    2024-10-31_d7e3fb59b4936d169d1b1f3118cdfc9b_gandcrab

  • Size

    73KB

  • Sample

    241031-fbj4rs1rem

  • MD5

    d7e3fb59b4936d169d1b1f3118cdfc9b

  • SHA1

    2b958b506b101231931bed7fdbba11d0b89d1257

  • SHA256

    c6190f1c760dc9d5267c2551f12dec8d708edcfc6a649f5a328f1c0d399f25fe

  • SHA512

    6f892e160cd01c960e82116ae03cce29233aa4a7fd294c7d339fe32bd8652dc042e903262c2d08a7b2c59065fb08a1e0ddd1cf5345ffe1a5729cd595ca2908ae

  • SSDEEP

    1536:l555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:iMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-10-31_d7e3fb59b4936d169d1b1f3118cdfc9b_gandcrab

    • Size

      73KB

    • MD5

      d7e3fb59b4936d169d1b1f3118cdfc9b

    • SHA1

      2b958b506b101231931bed7fdbba11d0b89d1257

    • SHA256

      c6190f1c760dc9d5267c2551f12dec8d708edcfc6a649f5a328f1c0d399f25fe

    • SHA512

      6f892e160cd01c960e82116ae03cce29233aa4a7fd294c7d339fe32bd8652dc042e903262c2d08a7b2c59065fb08a1e0ddd1cf5345ffe1a5729cd595ca2908ae

    • SSDEEP

      1536:l555555555555pmgSeGDjtQhnwmmB0yKMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rf:iMSjOnrmBiMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks