General

  • Target

    2024-11-11_225ad27fa2e9723552b5c187e7a8c2f2_gandcrab

  • Size

    73KB

  • Sample

    241111-g7qrvsveqg

  • MD5

    225ad27fa2e9723552b5c187e7a8c2f2

  • SHA1

    4c895480b49ce9a2743261f6b74054b4c81ebc9e

  • SHA256

    340dd2a934ca2a2f45ec87318ebff1842b8147d4c6c1a018a3c778e88b51b66c

  • SHA512

    bc12fd93782cdaa889b9fc56bdfd8b34e7280368a90fc51fc324b549a5ff047bb5155303f9fdab23eff68d064416d2e190f1815c9bd9d3823bd5db72d8629c92

  • SSDEEP

    1536:S55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:oMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-11-11_225ad27fa2e9723552b5c187e7a8c2f2_gandcrab

    • Size

      73KB

    • MD5

      225ad27fa2e9723552b5c187e7a8c2f2

    • SHA1

      4c895480b49ce9a2743261f6b74054b4c81ebc9e

    • SHA256

      340dd2a934ca2a2f45ec87318ebff1842b8147d4c6c1a018a3c778e88b51b66c

    • SHA512

      bc12fd93782cdaa889b9fc56bdfd8b34e7280368a90fc51fc324b549a5ff047bb5155303f9fdab23eff68d064416d2e190f1815c9bd9d3823bd5db72d8629c92

    • SSDEEP

      1536:S55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:oMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks