gandcrab | 7c5384a432897ce181ebd480145a0232e76663fddd1602a95440f7dfc3097d58 | Triage

Sharing

General

Target

2025-01-22_200753bb01ca2f07404848800b063fef_gandcrab
Size

70KB
Sample

250122-w4qd9ayph1
MD5

200753bb01ca2f07404848800b063fef
SHA1

47488836854a65bf23116fce04f7b7d18413c7b0
SHA256

7c5384a432897ce181ebd480145a0232e76663fddd1602a95440f7dfc3097d58
SHA512

b8582df47babb1e2e1f218f7eac8bf58ace65bc6067d93941a44248032dff2219838544cde17286b9711ee9cba10e6251a1836d2719ec5342fc2722c42433e57
SSDEEP

1536:EzzzzzzzzADypczUk+lkZJWMqqUM2Ovvd67:7d5BJWMqqMOvvd

Score

10^/10

gandcrab discovery persistence

Malware Config

Targets

- Target
  
  2025-01-22_200753bb01ca2f07404848800b063fef_gandcrab
- Size
  
  70KB
- MD5
  
  200753bb01ca2f07404848800b063fef
- SHA1
  
  47488836854a65bf23116fce04f7b7d18413c7b0
- SHA256
  
  7c5384a432897ce181ebd480145a0232e76663fddd1602a95440f7dfc3097d58
- SHA512
  
  b8582df47babb1e2e1f218f7eac8bf58ace65bc6067d93941a44248032dff2219838544cde17286b9711ee9cba10e6251a1836d2719ec5342fc2722c42433e57
- SSDEEP
  
  1536:EzzzzzzzzADypczUk+lkZJWMqqUM2Ovvd67:7d5BJWMqqMOvvd
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence