General

  • Target

    2024-11-03_72fd84f356b8c6b8bb72ef97d6bc6a67_gandcrab

  • Size

    73KB

  • Sample

    241103-c48faaskav

  • MD5

    72fd84f356b8c6b8bb72ef97d6bc6a67

  • SHA1

    878b5bb2fe0feab8f6083f86cb6e2e8c85ee6120

  • SHA256

    89ffc98f18ab3ef1344923a1987f642ebd428020edbf399795aa0228e0ed55f5

  • SHA512

    1be5ede28f9c0269a277196c8e16c99519185f94d49035773fd88546ef78b6d02e9b3185a221b00159fb7b3ed431ff558c0122506024ec6f33b021f1dd0ed823

  • SSDEEP

    1536:N555555555555pmgSeGDjtQhnwmmB0y/MqqU+2bbbAV2/S2mr3IdE8mne0Avu5rD:qMSjOnrmBHMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-11-03_72fd84f356b8c6b8bb72ef97d6bc6a67_gandcrab

    • Size

      73KB

    • MD5

      72fd84f356b8c6b8bb72ef97d6bc6a67

    • SHA1

      878b5bb2fe0feab8f6083f86cb6e2e8c85ee6120

    • SHA256

      89ffc98f18ab3ef1344923a1987f642ebd428020edbf399795aa0228e0ed55f5

    • SHA512

      1be5ede28f9c0269a277196c8e16c99519185f94d49035773fd88546ef78b6d02e9b3185a221b00159fb7b3ed431ff558c0122506024ec6f33b021f1dd0ed823

    • SSDEEP

      1536:N555555555555pmgSeGDjtQhnwmmB0y/MqqU+2bbbAV2/S2mr3IdE8mne0Avu5rD:qMSjOnrmBHMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks