General

  • Target

    078005ac128a527d0413867089c6c772038555000979a68b925ccaed756ed724

  • Size

    72KB

  • Sample

    250325-x9c7js1wcz

  • MD5

    b13639f3bf9e0bf357c7b02eee424846

  • SHA1

    0296580d42abc7b06e49f7d412e7f17067b84aa3

  • SHA256

    078005ac128a527d0413867089c6c772038555000979a68b925ccaed756ed724

  • SHA512

    288a7d7f5e9205f87d0d2ac393015d547f0ed349448ab821e737777fcf3368fc80f89ab93a62e04d5007dce2ae5ed83200822be65e21c134a1b1985862eb65b9

  • SSDEEP

    1536:IZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXouvVdq8hbHnAwfMqqU+2bbbAV2/S2Lkvj:GBouvVzFHpfMqqDL2/Lkvd

Malware Config

Targets

    • Target

      078005ac128a527d0413867089c6c772038555000979a68b925ccaed756ed724

    • Size

      72KB

    • MD5

      b13639f3bf9e0bf357c7b02eee424846

    • SHA1

      0296580d42abc7b06e49f7d412e7f17067b84aa3

    • SHA256

      078005ac128a527d0413867089c6c772038555000979a68b925ccaed756ed724

    • SHA512

      288a7d7f5e9205f87d0d2ac393015d547f0ed349448ab821e737777fcf3368fc80f89ab93a62e04d5007dce2ae5ed83200822be65e21c134a1b1985862eb65b9

    • SSDEEP

      1536:IZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXouvVdq8hbHnAwfMqqU+2bbbAV2/S2Lkvj:GBouvVzFHpfMqqDL2/Lkvd

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

    • Gandcrab family

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks