Overview

overview

10

Static

static

3

2024-02-18...ia.exe

windows7-x64

10

2024-02-18...ia.exe

windows10-2004-x64

10

Resubmissions

11-12-2024 16:02

241211-tg8afazkhs 3

11-12-2024 16:01

241211-tgqematqep 10

18-02-2024 14:56

240218-sa124sbd8t 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-18_fb4b233a457ae9193d454081a3c1963c_karagany_mafia

  • Size

    250KB

  • Sample

    241211-tgqematqep

  • MD5

    fb4b233a457ae9193d454081a3c1963c

  • SHA1

    6a8b703ee3adf52b6c150e9c6dd82cbf7855a2eb

  • SHA256

    7359aeefa0239e108df07722b8ca8e9fb88bd051c9bd7220e4a88192be825b4e

  • SHA512

    6e397eae43524f9e84b154226eae44b24596c725b487d571c393cba69678f0ca65646fd32e3cd32bdd06d7f8668f722f4d89f5b2dd6167b60032bf1e0342c9be

  • SSDEEP

    6144:h+YrOIBjaklexBgiJ8sTSIkIpxIp8mDtfPBRwasxXq:BOCjaklYgVIpxIhDtR

Score
10/10
gandcrabbackdoordiscoverypersistenceransomware

Malware Config

Targets

    • Target

      2024-02-18_fb4b233a457ae9193d454081a3c1963c_karagany_mafia

    • Size

      250KB

    • MD5

      fb4b233a457ae9193d454081a3c1963c

    • SHA1

      6a8b703ee3adf52b6c150e9c6dd82cbf7855a2eb

    • SHA256

      7359aeefa0239e108df07722b8ca8e9fb88bd051c9bd7220e4a88192be825b4e

    • SHA512

      6e397eae43524f9e84b154226eae44b24596c725b487d571c393cba69678f0ca65646fd32e3cd32bdd06d7f8668f722f4d89f5b2dd6167b60032bf1e0342c9be

    • SSDEEP

      6144:h+YrOIBjaklexBgiJ8sTSIkIpxIp8mDtfPBRwasxXq:BOCjaklYgVIpxIhDtR

    Score
    10/10
    gandcrabbackdoordiscoverypersistenceransomware

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Gandcrab family

      gandcrab

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks