Overview

overview

10

Static

static

10

2025-03-25...ab.exe

windows7-x64

6

2025-03-25...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-25_ff1037a104136516ca73afabb750946a_gandcrab

  • Size

    70KB

  • Sample

    250325-1cqyxssyfy

  • MD5

    ff1037a104136516ca73afabb750946a

  • SHA1

    c617626a7e3a4314a3763ed148b370139826a1ff

  • SHA256

    defeacc39d5a2cd02a0748080e7980277f89f48237be14cf624f252155777352

  • SHA512

    742f9cfb358ee219a017eb92889cc4f837e8440473a4718fcd29b3837087008dc65f857761a1fe5f66c3cc2342e2ce6341ea26085f9367424cd41d8d9973d4b6

  • SSDEEP

    1536:LZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Kd5BJHMqqDL2/Ovvdr

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Targets

    • Target

      2025-03-25_ff1037a104136516ca73afabb750946a_gandcrab

    • Size

      70KB

    • MD5

      ff1037a104136516ca73afabb750946a

    • SHA1

      c617626a7e3a4314a3763ed148b370139826a1ff

    • SHA256

      defeacc39d5a2cd02a0748080e7980277f89f48237be14cf624f252155777352

    • SHA512

      742f9cfb358ee219a017eb92889cc4f837e8440473a4718fcd29b3837087008dc65f857761a1fe5f66c3cc2342e2ce6341ea26085f9367424cd41d8d9973d4b6

    • SSDEEP

      1536:LZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Kd5BJHMqqDL2/Ovvdr

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks