Resubmissions

25/03/2025, 15:24

250325-stf62sx1cx 10

05/02/2025, 09:30

250205-lgmpqszqfz 10

27/01/2025, 22:24

250127-2bdgwaxnaz 10

General

  • Target

    2025-01-27_2e21d33e977bab8528f5ba88422e2efc_gandcrab

  • Size

    72KB

  • Sample

    250325-stf62sx1cx

  • MD5

    2e21d33e977bab8528f5ba88422e2efc

  • SHA1

    956a64ae2a67cfe749fdcd340be1ba1ae1ec1273

  • SHA256

    6faa769f5fed18b933e40d77029d4f9e8d69b95eacf28dad4a0aa447c43e51b6

  • SHA512

    4faa64524622f94f55fab2f906fdae4fc763ff43e0d96e2bf5a379d3892a11a774a6762f30a3c8e5bd53359eec3540e78a8adf4caba79f545b32ec2943d53130

  • SSDEEP

    1536:SZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXouSVR8hbHnAwfMqqU+2bbbAV2/S2LkvdB:0BouSVeFHpfMqqDL2/Lkvd

Malware Config

Targets

    • Target

      2025-01-27_2e21d33e977bab8528f5ba88422e2efc_gandcrab

    • Size

      72KB

    • MD5

      2e21d33e977bab8528f5ba88422e2efc

    • SHA1

      956a64ae2a67cfe749fdcd340be1ba1ae1ec1273

    • SHA256

      6faa769f5fed18b933e40d77029d4f9e8d69b95eacf28dad4a0aa447c43e51b6

    • SHA512

      4faa64524622f94f55fab2f906fdae4fc763ff43e0d96e2bf5a379d3892a11a774a6762f30a3c8e5bd53359eec3540e78a8adf4caba79f545b32ec2943d53130

    • SSDEEP

      1536:SZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXouSVR8hbHnAwfMqqU+2bbbAV2/S2LkvdB:0BouSVeFHpfMqqDL2/Lkvd

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

    • Gandcrab family

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks