General

  • Target

    2024-11-06_87e44df56f8f337890179670f7f098a8_gandcrab

  • Size

    83KB

  • Sample

    241106-lmr7eaxjhx

  • MD5

    87e44df56f8f337890179670f7f098a8

  • SHA1

    6c5edeb99ed0fe2a3d9c1f6d31b7a873464e209c

  • SHA256

    ab67481e32cfb702cb0e30120d7f33f7e1b93b6817926def7fb629a109cac89a

  • SHA512

    848dacc74979dcfe69041c8ce72d7803947cb713c14663f17234f7f636c51610120f53eeb01e9544d4ba19e069f1854fbda71cf73c5fe8f0f50c55fe41a3b3ee

  • SSDEEP

    1536:/55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:LMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-11-06_87e44df56f8f337890179670f7f098a8_gandcrab

    • Size

      83KB

    • MD5

      87e44df56f8f337890179670f7f098a8

    • SHA1

      6c5edeb99ed0fe2a3d9c1f6d31b7a873464e209c

    • SHA256

      ab67481e32cfb702cb0e30120d7f33f7e1b93b6817926def7fb629a109cac89a

    • SHA512

      848dacc74979dcfe69041c8ce72d7803947cb713c14663f17234f7f636c51610120f53eeb01e9544d4ba19e069f1854fbda71cf73c5fe8f0f50c55fe41a3b3ee

    • SSDEEP

      1536:/55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:LMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks