General

  • Target

    2024-11-11_a9e1a41eeb1ee7d4708893f99a6ebd6d_gandcrab

  • Size

    73KB

  • Sample

    241111-e2xbcasgmj

  • MD5

    a9e1a41eeb1ee7d4708893f99a6ebd6d

  • SHA1

    340f8ccde05dfd5078420f01bd67fe16d7bcb967

  • SHA256

    8cde0baa19b553b6a962fd29d10771ef08392264ebbd3046a8448d91be0546d0

  • SHA512

    f1aaec65a11d8cc9d2376bc5e3f97a2b7fd73f880bb185cdd3427bbcee2bdb061e2df906791b7e712ccce2d8d12ffbbb427a50da2e26d39c418dfae14122dee6

  • SSDEEP

    1536:z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:vMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-11-11_a9e1a41eeb1ee7d4708893f99a6ebd6d_gandcrab

    • Size

      73KB

    • MD5

      a9e1a41eeb1ee7d4708893f99a6ebd6d

    • SHA1

      340f8ccde05dfd5078420f01bd67fe16d7bcb967

    • SHA256

      8cde0baa19b553b6a962fd29d10771ef08392264ebbd3046a8448d91be0546d0

    • SHA512

      f1aaec65a11d8cc9d2376bc5e3f97a2b7fd73f880bb185cdd3427bbcee2bdb061e2df906791b7e712ccce2d8d12ffbbb427a50da2e26d39c418dfae14122dee6

    • SSDEEP

      1536:z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:vMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks