Overview

overview

10

Static

static

10

2024-11-09...ab.exe

windows7-x64

6

2024-11-09...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-09_1822dc0daedfcd8d283a79fdcf223f3f_gandcrab

  • Size

    72KB

  • Sample

    241109-cv1zvavgpf

  • MD5

    1822dc0daedfcd8d283a79fdcf223f3f

  • SHA1

    8f09b9b740de14bb3f30832a3b3fd6e788d6cdd6

  • SHA256

    862eb1c6828264d8ec0f6578e3c4071922c7aafa954f06eb745f02594c557027

  • SHA512

    e0b22839e38f4c6a5f636b64f284184fe1ba910d99ffd8f681b1df6c386bda7cf932847b753da7d5d0a443c651f64aa9f2b633bb4f2e06eebe37164768c1b0dc

  • SSDEEP

    1536:iZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd/:EBounVyFHpfMqqDL2/Lkvd/

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Targets

    • Target

      2024-11-09_1822dc0daedfcd8d283a79fdcf223f3f_gandcrab

    • Size

      72KB

    • MD5

      1822dc0daedfcd8d283a79fdcf223f3f

    • SHA1

      8f09b9b740de14bb3f30832a3b3fd6e788d6cdd6

    • SHA256

      862eb1c6828264d8ec0f6578e3c4071922c7aafa954f06eb745f02594c557027

    • SHA512

      e0b22839e38f4c6a5f636b64f284184fe1ba910d99ffd8f681b1df6c386bda7cf932847b753da7d5d0a443c651f64aa9f2b633bb4f2e06eebe37164768c1b0dc

    • SSDEEP

      1536:iZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd/:EBounVyFHpfMqqDL2/Lkvd/

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks