General

  • Target

    2024-11-24_dceed9291aabefe106bac1e1955e4086_gandcrab

  • Size

    83KB

  • Sample

    241124-kc6flssjew

  • MD5

    dceed9291aabefe106bac1e1955e4086

  • SHA1

    dcb278a39115f7fbd14a2e7c6e42530462257875

  • SHA256

    950be9087674789680e636942d1abda1dde2602344867e071fc4d5a14f83a50b

  • SHA512

    a4609af51c1a7e1411cdc0d1eecfb1f0f955cf57523c358fe51744076ec81b07b2c4b125c450095ac2bc1266e704f626b6adf06313bd691e35935f81955bb9e2

  • SSDEEP

    1536:z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:vMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-11-24_dceed9291aabefe106bac1e1955e4086_gandcrab

    • Size

      83KB

    • MD5

      dceed9291aabefe106bac1e1955e4086

    • SHA1

      dcb278a39115f7fbd14a2e7c6e42530462257875

    • SHA256

      950be9087674789680e636942d1abda1dde2602344867e071fc4d5a14f83a50b

    • SHA512

      a4609af51c1a7e1411cdc0d1eecfb1f0f955cf57523c358fe51744076ec81b07b2c4b125c450095ac2bc1266e704f626b6adf06313bd691e35935f81955bb9e2

    • SSDEEP

      1536:z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:vMSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks