Overview

overview

10

Static

static

10

2024-11-03...ab.exe

windows7-x64

6

2024-11-03...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-03_e890fe641a4e54fddc4d356aa9bcbdca_gandcrab

  • Size

    70KB

  • Sample

    241103-qpwptsxqhj

  • MD5

    e890fe641a4e54fddc4d356aa9bcbdca

  • SHA1

    c09168a1d2f932c0fa169d130fb170c48fcd8942

  • SHA256

    9b9ff8e1e52a9a3318f46f12a4684f49143680bc0973a2362486aa16d15ea8b6

  • SHA512

    913cc21de6e3897de71374fb9154e0c1dfe7a9375b5af22a527d6bb4ca684d5eb3007929d60894c76778c5b56c5213eab08fcc1a83af4d51254889c263616fe6

  • SSDEEP

    1536:XZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:+d5BJHMqqDL2/Ovvdr

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Targets

    • Target

      2024-11-03_e890fe641a4e54fddc4d356aa9bcbdca_gandcrab

    • Size

      70KB

    • MD5

      e890fe641a4e54fddc4d356aa9bcbdca

    • SHA1

      c09168a1d2f932c0fa169d130fb170c48fcd8942

    • SHA256

      9b9ff8e1e52a9a3318f46f12a4684f49143680bc0973a2362486aa16d15ea8b6

    • SHA512

      913cc21de6e3897de71374fb9154e0c1dfe7a9375b5af22a527d6bb4ca684d5eb3007929d60894c76778c5b56c5213eab08fcc1a83af4d51254889c263616fe6

    • SSDEEP

      1536:XZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:+d5BJHMqqDL2/Ovvdr

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks