General

  • Target

    a0022cc12c0c780292359a59fe9c9fc85cbc040ac2bc18b21e829241052df6f1N.exe

  • Size

    83KB

  • Sample

    241125-qqq6qsvpgq

  • MD5

    b35305481455316413ef770e60277b60

  • SHA1

    03329094c9e813ea07f669d68c9b5edf8a5c7744

  • SHA256

    a0022cc12c0c780292359a59fe9c9fc85cbc040ac2bc18b21e829241052df6f1

  • SHA512

    0460160ecf12340c5bf17d71bf682dae28202b45aae6215495b1d72a3c8459de24499b85af8e0024f10b9233a726807f3e511cc3ccc467424beec04eb678f56a

  • SSDEEP

    1536:Y55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:6MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      a0022cc12c0c780292359a59fe9c9fc85cbc040ac2bc18b21e829241052df6f1N.exe

    • Size

      83KB

    • MD5

      b35305481455316413ef770e60277b60

    • SHA1

      03329094c9e813ea07f669d68c9b5edf8a5c7744

    • SHA256

      a0022cc12c0c780292359a59fe9c9fc85cbc040ac2bc18b21e829241052df6f1

    • SHA512

      0460160ecf12340c5bf17d71bf682dae28202b45aae6215495b1d72a3c8459de24499b85af8e0024f10b9233a726807f3e511cc3ccc467424beec04eb678f56a

    • SSDEEP

      1536:Y55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r5:6MSjOnrmBTMqqDL2/mr3IdE8we0Avu5l

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks