Overview

overview

10

Static

static

10

2025-01-27...ab.exe

windows10-2004-x64

10

2025-01-27...ab.exe

windows7-x64

10

2025-01-27...ab.exe

windows10-2004-x64

10

2025-01-27...ab.exe

windows10-ltsc_2021-x64

10

2025-01-27...ab.exe

windows11-21h2-x64

10

Resubmissions

25/03/2025, 15:34

250325-szwtpasjt6 10

05/02/2025, 09:28

250205-lfgr4asjcq 10

27/01/2025, 21:22

250127-z8d4kawpel 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-01-27_29f4c053f9521dc75671f6a6804e30a7_gandcrab

  • Size

    97KB

  • Sample

    250325-szwtpasjt6

  • MD5

    29f4c053f9521dc75671f6a6804e30a7

  • SHA1

    7b8cb7c62001056fb1317b85dc0c7a0f8fa61755

  • SHA256

    9e0a26f7b1d5f8f23e1428c303dc23365cacb6c11b24be425d0ff42edb812522

  • SHA512

    9efee14860e3e66ad642f1a19af63c1687d7c270ba0581a893b5a56dd4c3acb7b83070571ed918749b570941351aadb33b45f4653d106235b3c643ae6adc87b0

  • SSDEEP

    1536:5ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:lBounVyFHFMqqDL2/LgHkc2

Score
10/10
gandcrabbackdoordiscoverypersistenceransomwareupx

Malware Config

Targets

    • Target

      2025-01-27_29f4c053f9521dc75671f6a6804e30a7_gandcrab

    • Size

      97KB

    • MD5

      29f4c053f9521dc75671f6a6804e30a7

    • SHA1

      7b8cb7c62001056fb1317b85dc0c7a0f8fa61755

    • SHA256

      9e0a26f7b1d5f8f23e1428c303dc23365cacb6c11b24be425d0ff42edb812522

    • SHA512

      9efee14860e3e66ad642f1a19af63c1687d7c270ba0581a893b5a56dd4c3acb7b83070571ed918749b570941351aadb33b45f4653d106235b3c643ae6adc87b0

    • SSDEEP

      1536:5ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:lBounVyFHFMqqDL2/LgHkc2

    Score
    10/10
    gandcrabbackdoordiscoverypersistenceransomwareupx

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Gandcrab family

      gandcrab

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2behavioral3behavioral4behavioral5

MITRE ATT&CK Enterprise v15

Tasks