Overview

overview

10

Static

static

10

2024-12-17...ab.exe

windows7-x64

6

2024-12-17...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-17_584a42c3611ee9c66c0489e50c07c17c_gandcrab

  • Size

    73KB

  • Sample

    241217-vzwvssvjbl

  • MD5

    584a42c3611ee9c66c0489e50c07c17c

  • SHA1

    207f31a9ecac7ff81f9930b5693858e60d0c8dab

  • SHA256

    f76f2fa7e9973d77de2b8209feada054e92fbf0868ba1dcb31362590b72c9845

  • SHA512

    f800cb171cfb9c5dd703ba458b46d68a677b7a36e8684f18f7a517ef6254d0d08cef99b6b6d0fbd90642f6417d60b8433f3dc8282e1156375246e3e70f7d758c

  • SSDEEP

    1536:E555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:hMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-12-17_584a42c3611ee9c66c0489e50c07c17c_gandcrab

    • Size

      73KB

    • MD5

      584a42c3611ee9c66c0489e50c07c17c

    • SHA1

      207f31a9ecac7ff81f9930b5693858e60d0c8dab

    • SHA256

      f76f2fa7e9973d77de2b8209feada054e92fbf0868ba1dcb31362590b72c9845

    • SHA512

      f800cb171cfb9c5dd703ba458b46d68a677b7a36e8684f18f7a517ef6254d0d08cef99b6b6d0fbd90642f6417d60b8433f3dc8282e1156375246e3e70f7d758c

    • SSDEEP

      1536:E555555555555pmgSeGDjtQhnwmmB0yxMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rZ:hMSjOnrmBpMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks