Overview

overview

10

Static

static

3

2025-01-13...er.exe

windows7-x64

10

2025-01-13...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-13_274e390c4fb90d52b6eb0dab09ed3f44_magniber

  • Size

    277KB

  • Sample

    250113-yhag1sxqck

  • MD5

    274e390c4fb90d52b6eb0dab09ed3f44

  • SHA1

    34e92c0d42740a4dc8cff7c15037363751e637c4

  • SHA256

    e7141aa12c5aa728962bf2aaeb37ff59e091335406898f813d593c0b3b30f73c

  • SHA512

    036e24b0f00ffd3dad1b57fc12d42b59d860d9b63358c0b45c0d7c45fa2b9fccbc129e2768bfab50848f6954823ec2425629abc6028c28ae12f5bec7656282d8

  • SSDEEP

    6144:33nHPDm0jLAu6Y5jEw564aoJxmhuw1AFkHK/:Hvbjf6YNFehQwo

Score
10/10
gandcrabbackdoordiscoverypersistenceransomware

Malware Config

Targets

    • Target

      2025-01-13_274e390c4fb90d52b6eb0dab09ed3f44_magniber

    • Size

      277KB

    • MD5

      274e390c4fb90d52b6eb0dab09ed3f44

    • SHA1

      34e92c0d42740a4dc8cff7c15037363751e637c4

    • SHA256

      e7141aa12c5aa728962bf2aaeb37ff59e091335406898f813d593c0b3b30f73c

    • SHA512

      036e24b0f00ffd3dad1b57fc12d42b59d860d9b63358c0b45c0d7c45fa2b9fccbc129e2768bfab50848f6954823ec2425629abc6028c28ae12f5bec7656282d8

    • SSDEEP

      6144:33nHPDm0jLAu6Y5jEw564aoJxmhuw1AFkHK/:Hvbjf6YNFehQwo

    Score
    10/10
    gandcrabbackdoordiscoverypersistenceransomware

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Gandcrab family

      gandcrab

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks