Overview

overview

10

Static

static

10

2025-04-10...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-10_c57d1f9eddee8d32aa2b41ef7776c59f_elex_gandcrab

  • Size

    97KB

  • Sample

    250410-vvlt2axrx3

  • MD5

    c57d1f9eddee8d32aa2b41ef7776c59f

  • SHA1

    9baa1c14e33f4798d75cf762069e4fcf0ea8c811

  • SHA256

    603f9be283b1e2fc13de8bcedbfd8514ac1544efb02d45bb551448aa70d95824

  • SHA512

    86e71a8861e4ff4115d1b8ceb781ec220f5100ad30cfc63325d073d880cd123fe163030e358296e13f0659a9ccd28d045636e7356019f95cb17285469e86907e

  • SSDEEP

    1536:EZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:aBounVyFHFMqqDL2/LgHkc2

Score
10/10
gandcrabbackdoordiscoverypersistenceransomwareupx

Malware Config

Targets

    • Target

      2025-04-10_c57d1f9eddee8d32aa2b41ef7776c59f_elex_gandcrab

    • Size

      97KB

    • MD5

      c57d1f9eddee8d32aa2b41ef7776c59f

    • SHA1

      9baa1c14e33f4798d75cf762069e4fcf0ea8c811

    • SHA256

      603f9be283b1e2fc13de8bcedbfd8514ac1544efb02d45bb551448aa70d95824

    • SHA512

      86e71a8861e4ff4115d1b8ceb781ec220f5100ad30cfc63325d073d880cd123fe163030e358296e13f0659a9ccd28d045636e7356019f95cb17285469e86907e

    • SSDEEP

      1536:EZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAEMqqU+2bbbAV2/S2LNmHkD:aBounVyFHFMqqDL2/LgHkc2

    Score
    10/10
    gandcrabbackdoordiscoverypersistenceransomwareupx

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

      ransomwarebackdoorgandcrab

    • Gandcrab family

      gandcrab

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks