General

  • Target

    2024-11-19_86802abe5ce0ea6346c91d0482c470eb_gandcrab

  • Size

    73KB

  • Sample

    241119-lba4ratard

  • MD5

    86802abe5ce0ea6346c91d0482c470eb

  • SHA1

    ca54542e6cf5c3ad343c148280e64a417b2d7982

  • SHA256

    ec41f86036e81bf01f94e288452e016bb3c1590b438d46b7a4d50de1d98e1a5e

  • SHA512

    02e03f28195036debb0eeea3e9591db33328419b7c148be6705c9c0302236c507ce3a425410f368ee5b6c9e28530f63faaf8d957d75244ba349792796ab39e3d

  • SSDEEP

    1536:H55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:jMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-11-19_86802abe5ce0ea6346c91d0482c470eb_gandcrab

    • Size

      73KB

    • MD5

      86802abe5ce0ea6346c91d0482c470eb

    • SHA1

      ca54542e6cf5c3ad343c148280e64a417b2d7982

    • SHA256

      ec41f86036e81bf01f94e288452e016bb3c1590b438d46b7a4d50de1d98e1a5e

    • SHA512

      02e03f28195036debb0eeea3e9591db33328419b7c148be6705c9c0302236c507ce3a425410f368ee5b6c9e28530f63faaf8d957d75244ba349792796ab39e3d

    • SSDEEP

      1536:H55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:jMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks