General

  • Target

    2024-11-27_d60c33c8415f84cd5e0689ede8416556_gandcrab

  • Size

    83KB

  • Sample

    241127-1ce7esxmdp

  • MD5

    d60c33c8415f84cd5e0689ede8416556

  • SHA1

    58cab4baa32427f5e1656494f7dfdcb062ecbd34

  • SHA256

    81f94882cea2a3dc93498b7ab10436d65d2311ee30f25123a405769aed2e1a5b

  • SHA512

    d14ab0c1bb00baa9266a963316fc6b5ad776de14d69d2ada68c94dcf1b154a055c30d7ef3c604bdf7fa718470512cba25275a2e3188e6cacc070f49fa5894ae7

  • SSDEEP

    1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rD:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5n

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-11-27_d60c33c8415f84cd5e0689ede8416556_gandcrab

    • Size

      83KB

    • MD5

      d60c33c8415f84cd5e0689ede8416556

    • SHA1

      58cab4baa32427f5e1656494f7dfdcb062ecbd34

    • SHA256

      81f94882cea2a3dc93498b7ab10436d65d2311ee30f25123a405769aed2e1a5b

    • SHA512

      d14ab0c1bb00baa9266a963316fc6b5ad776de14d69d2ada68c94dcf1b154a055c30d7ef3c604bdf7fa718470512cba25275a2e3188e6cacc070f49fa5894ae7

    • SSDEEP

      1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rD:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5n

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks