【ニュース】
◆ランサムウェア「Gandcrab」が感染サイトを狙う (CISCO, 2018/05/17)
https://gblogs.cisco.com/jp/2018/05/talos-gandcrab-compromised-sites/
【IoC情報】
◆Gandcrab (IoC (TT Malware Log))
https://ioc.hatenablog.com/entry/2018/05/17/000000
【関連まとめ記事】
◆全体まとめ
◆マルウェア / Malware (まとめ)
◆ランサムウェア (まとめ)
◆GandCrab (まとめ)
https://malware-log.hatenablog.com/entry/GandCrab
【インディケータ情報】
■ ハッシュ情報(Sha256) - Gandcrab -
6a623b1e016fc0df94fe27a3eb9cc1128c5ee3831a7dcc8e4879427167a41501
692c023850bbd95f116d5a623a5e0de9ad0ad13fadb3d89e584cc0aa5dc71f08
ad48c3770736588b17b4af2599704b5c86ff8ae6dadd30df59ea2b1ccc221f9c
3486088d40d41b251017b4b6d21e742c78be820eaa8fe5d44eee79cf5974477e
521fcb199a36d2c3b3bac40b025c2deac472f7f6f46c2eef253132e9f42ed95d
9ba87c3c9ac737b5fd5fc0270f902fbe2eabbb1e0d0db64c3a07fea2eeeb5ba6
27431cce6163d4456214baacbc9fd163d9e7e16348f41761bac13b65e3947aad
ce9c9917b66815ec7e5009f8bfa19ef3d2dfc0cf66be0b4b99b9bebb244d6706
0b8618ea4aea0b213278a41436bde306a71ca9ba9bb9e6f0d33aca1c4373b3b5
07adce515b7c2d6132713b32f0e28999e262832b47abc26ffc58297053f83257
0f8ac8620229e7c64cf45470d637ea9bb7ae9d9f880777720389411b75cbdc2e
812a7387e6728f462b213ff0f6ccc3c74aff8c258748e4635e1ddfa3b45927f0
d25d1aba05f4a66a90811c31c6f4101267151e4ec49a7f393e53d87499d5ea7a
ee24d0d69b4e6c6ad479c886bb0536e60725bfa0becdafecadafc10e7a231a55
■ドメイン情報(C&C)
zonealarm[.]bit
Ransomware[.]bit
gandcrab[.]bit
Carder[.]bit
■ドメイン情報(感染サイト)
Herbal-treatment-advisory[.]com
pushpakcourier[.]net
【検索】
google: 6a623b1e016fc0df94fe27a3eb9cc1128c5ee3831a7dcc8e4879427167a41501
google: 692c023850bbd95f116d5a623a5e0de9ad0ad13fadb3d89e584cc0aa5dc71f08
google: ad48c3770736588b17b4af2599704b5c86ff8ae6dadd30df59ea2b1ccc221f9c
google: 3486088d40d41b251017b4b6d21e742c78be820eaa8fe5d44eee79cf5974477e
google: 521fcb199a36d2c3b3bac40b025c2deac472f7f6f46c2eef253132e9f42ed95d
google: 9ba87c3c9ac737b5fd5fc0270f902fbe2eabbb1e0d0db64c3a07fea2eeeb5ba6
google: 27431cce6163d4456214baacbc9fd163d9e7e16348f41761bac13b65e3947aad
google: ce9c9917b66815ec7e5009f8bfa19ef3d2dfc0cf66be0b4b99b9bebb244d6706
google: 0b8618ea4aea0b213278a41436bde306a71ca9ba9bb9e6f0d33aca1c4373b3b5
google: 07adce515b7c2d6132713b32f0e28999e262832b47abc26ffc58297053f83257
google: 0f8ac8620229e7c64cf45470d637ea9bb7ae9d9f880777720389411b75cbdc2e
google: 812a7387e6728f462b213ff0f6ccc3c74aff8c258748e4635e1ddfa3b45927f0
google: d25d1aba05f4a66a90811c31c6f4101267151e4ec49a7f393e53d87499d5ea7a
google: ee24d0d69b4e6c6ad479c886bb0536e60725bfa0becdafecadafc10e7a231a55
【VT検索】
https://www.virustotal.com/gui/file/6a623b1e016fc0df94fe27a3eb9cc1128c5ee3831a7dcc8e4879427167a41501
https://www.virustotal.com/gui/file/692c023850bbd95f116d5a623a5e0de9ad0ad13fadb3d89e584cc0aa5dc71f08
https://www.virustotal.com/gui/file/ad48c3770736588b17b4af2599704b5c86ff8ae6dadd30df59ea2b1ccc221f9c
https://www.virustotal.com/gui/file/3486088d40d41b251017b4b6d21e742c78be820eaa8fe5d44eee79cf5974477e
https://www.virustotal.com/gui/file/521fcb199a36d2c3b3bac40b025c2deac472f7f6f46c2eef253132e9f42ed95d
https://www.virustotal.com/gui/file/9ba87c3c9ac737b5fd5fc0270f902fbe2eabbb1e0d0db64c3a07fea2eeeb5ba6
https://www.virustotal.com/gui/file/27431cce6163d4456214baacbc9fd163d9e7e16348f41761bac13b65e3947aad
https://www.virustotal.com/gui/file/ce9c9917b66815ec7e5009f8bfa19ef3d2dfc0cf66be0b4b99b9bebb244d6706
https://www.virustotal.com/gui/file/0b8618ea4aea0b213278a41436bde306a71ca9ba9bb9e6f0d33aca1c4373b3b5
https://www.virustotal.com/gui/file/07adce515b7c2d6132713b32f0e28999e262832b47abc26ffc58297053f83257
https://www.virustotal.com/gui/file/0f8ac8620229e7c64cf45470d637ea9bb7ae9d9f880777720389411b75cbdc2e
https://www.virustotal.com/gui/file/812a7387e6728f462b213ff0f6ccc3c74aff8c258748e4635e1ddfa3b45927f0
https://www.virustotal.com/gui/file/d25d1aba05f4a66a90811c31c6f4101267151e4ec49a7f393e53d87499d5ea7a
https://www.virustotal.com/gui/file/ee24d0d69b4e6c6ad479c886bb0536e60725bfa0becdafecadafc10e7a231a55
