Overview

overview

10

Static

static

10

2025-01-01...ab.exe

windows7-x64

6

2025-01-01...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-01_dae08e474f8caa6e49398c5cba56d034_gandcrab

  • Size

    75KB

  • Sample

    250101-xt58dsypey

  • MD5

    dae08e474f8caa6e49398c5cba56d034

  • SHA1

    cdd457268ed013af3127a085391005d9b3ed2425

  • SHA256

    5cb863dadda27c497c0f92badec465b0a5ca4f78f0b09db8bc23c481df71906d

  • SHA512

    7ce59ca087fc7caae4d707afc263c38b54799d64e35acd7e709d10e740ead0422d3da25ba2b98e550092349b95917eeca22bc9f8114c6745c30bba36ad3367a5

  • SSDEEP

    1536:k55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rg:2MSjOnrmBTMqqDL2/mr3IdE8we0Avu5c

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-01_dae08e474f8caa6e49398c5cba56d034_gandcrab

    • Size

      75KB

    • MD5

      dae08e474f8caa6e49398c5cba56d034

    • SHA1

      cdd457268ed013af3127a085391005d9b3ed2425

    • SHA256

      5cb863dadda27c497c0f92badec465b0a5ca4f78f0b09db8bc23c481df71906d

    • SHA512

      7ce59ca087fc7caae4d707afc263c38b54799d64e35acd7e709d10e740ead0422d3da25ba2b98e550092349b95917eeca22bc9f8114c6745c30bba36ad3367a5

    • SSDEEP

      1536:k55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rg:2MSjOnrmBTMqqDL2/mr3IdE8we0Avu5c

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks