Overview

overview

10

Static

static

10

2025-01-02...ab.exe

windows7-x64

6

2025-01-02...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-02_f09a6ce14ddb0c12312e5f42ea2f7552_gandcrab

  • Size

    72KB

  • Sample

    250102-rkq48avlet

  • MD5

    f09a6ce14ddb0c12312e5f42ea2f7552

  • SHA1

    33903f933d812c69b9bdc608e642cd0a3eb2450a

  • SHA256

    af1a330e3ca0c2cca5688e61d3b20c89de4873fc2c043a1d52f3a5f7f2da30ef

  • SHA512

    9ae455fc56f4e95b5114ada9d1024cdd4d80e6ca3cec024d863e34aa1fd09b2c66f8508a536c561c04ba38c0f58bbd7e5557698d0885ea43b345cbed8d493376

  • SSDEEP

    1536:wZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd6:eBounVyFHpfMqqDL2/Lkvd6

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Targets

    • Target

      2025-01-02_f09a6ce14ddb0c12312e5f42ea2f7552_gandcrab

    • Size

      72KB

    • MD5

      f09a6ce14ddb0c12312e5f42ea2f7552

    • SHA1

      33903f933d812c69b9bdc608e642cd0a3eb2450a

    • SHA256

      af1a330e3ca0c2cca5688e61d3b20c89de4873fc2c043a1d52f3a5f7f2da30ef

    • SHA512

      9ae455fc56f4e95b5114ada9d1024cdd4d80e6ca3cec024d863e34aa1fd09b2c66f8508a536c561c04ba38c0f58bbd7e5557698d0885ea43b345cbed8d493376

    • SSDEEP

      1536:wZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd6:eBounVyFHpfMqqDL2/Lkvd6

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks