Overview

overview

10

Static

static

10

2024-11-21...ab.exe

windows7-x64

6

2024-11-21...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-11-21_f37540c6b976b9c342b152cd3ae461e4_gandcrab

  • Size

    69KB

  • Sample

    241121-hwz2tszkfw

  • MD5

    f37540c6b976b9c342b152cd3ae461e4

  • SHA1

    afb2012c7e1e1f7ab242cbfab0a57a2cc893af5a

  • SHA256

    2b5b9237b5e34f3cf5b1c29169d9bf77a37855bf098b664c0efdd2605350607d

  • SHA512

    8467564cb0e058ff1613018a92af3c779ef515cb794e7766b43f2005232c93e6e6c100a360ee43085e3271f9a9654115d0326efbb30132efbf8e61d77fb3aeac

  • SSDEEP

    1536:xZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd9:tBounVyFHpfMqqDL2/Lkvd

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Targets

    • Target

      2024-11-21_f37540c6b976b9c342b152cd3ae461e4_gandcrab

    • Size

      69KB

    • MD5

      f37540c6b976b9c342b152cd3ae461e4

    • SHA1

      afb2012c7e1e1f7ab242cbfab0a57a2cc893af5a

    • SHA256

      2b5b9237b5e34f3cf5b1c29169d9bf77a37855bf098b664c0efdd2605350607d

    • SHA512

      8467564cb0e058ff1613018a92af3c779ef515cb794e7766b43f2005232c93e6e6c100a360ee43085e3271f9a9654115d0326efbb30132efbf8e61d77fb3aeac

    • SSDEEP

      1536:xZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd9:tBounVyFHpfMqqDL2/Lkvd

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks