Overview

overview

10

Static

static

10

2025-01-06...ab.exe

windows7-x64

6

2025-01-06...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-06_63a5ad4fa62cbf864ddc100111a4bf50_gandcrab

  • Size

    573KB

  • Sample

    250106-f35vjsxlcy

  • MD5

    63a5ad4fa62cbf864ddc100111a4bf50

  • SHA1

    b9868715b97ebca2e98cfd937060c817ff23add2

  • SHA256

    db7738c05eb03114bf6b9227cab2a56c5f6deb6d002f551dd3ece18b8a807d38

  • SHA512

    3e84956b74aea54b9aefecfe66c6dbc9431caa8da3cbabd13ade74b3177b4d31e26e508a0764ffc6eac6f22006b25b5c4b7a629ebbf4c5086fe2f236b96759ea

  • SSDEEP

    12288:aTOneqn6cDKWqQqkd1BtOkodxduog/TXJa/x82IErOJs:21+6cDKWNGuog/TXJmxO

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-06_63a5ad4fa62cbf864ddc100111a4bf50_gandcrab

    • Size

      573KB

    • MD5

      63a5ad4fa62cbf864ddc100111a4bf50

    • SHA1

      b9868715b97ebca2e98cfd937060c817ff23add2

    • SHA256

      db7738c05eb03114bf6b9227cab2a56c5f6deb6d002f551dd3ece18b8a807d38

    • SHA512

      3e84956b74aea54b9aefecfe66c6dbc9431caa8da3cbabd13ade74b3177b4d31e26e508a0764ffc6eac6f22006b25b5c4b7a629ebbf4c5086fe2f236b96759ea

    • SSDEEP

      12288:aTOneqn6cDKWqQqkd1BtOkodxduog/TXJa/x82IErOJs:21+6cDKWNGuog/TXJmxO

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks