General

  • Target

    2024-11-01_f9e3752ddfa130480bd94af3afbd6585_gandcrab

  • Size

    73KB

  • Sample

    241101-hcdpgszkbk

  • MD5

    f9e3752ddfa130480bd94af3afbd6585

  • SHA1

    f360fadf038bdf051d82560d0ebf477d39b2d9db

  • SHA256

    4869a44a913c8a2e9eb7b56b9909eeac69971921c264488dbc5e390cb6eae6b5

  • SHA512

    60181a5482ead07957332550e3a5793a2365aec70c1cac87e96c4a04c959c46ba5c94780428b3ca22589dab1f0ad2c75747ec0451dd9ca7d1b744ecf1c1e9249

  • SSDEEP

    1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-11-01_f9e3752ddfa130480bd94af3afbd6585_gandcrab

    • Size

      73KB

    • MD5

      f9e3752ddfa130480bd94af3afbd6585

    • SHA1

      f360fadf038bdf051d82560d0ebf477d39b2d9db

    • SHA256

      4869a44a913c8a2e9eb7b56b9909eeac69971921c264488dbc5e390cb6eae6b5

    • SHA512

      60181a5482ead07957332550e3a5793a2365aec70c1cac87e96c4a04c959c46ba5c94780428b3ca22589dab1f0ad2c75747ec0451dd9ca7d1b744ecf1c1e9249

    • SSDEEP

      1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks