General

  • Target

    2024-12-31_715a9549dd572bc493a7dfcf9cf4ed6c_gandcrab

  • Size

    73KB

  • Sample

    241231-g4m7kaymbn

  • MD5

    715a9549dd572bc493a7dfcf9cf4ed6c

  • SHA1

    95709b5a684b3f3a3b8fe2520926feca5eea206d

  • SHA256

    ed0abda36422ec513615547621551d983b116e7c814cf8d6856e1e13f113cb1c

  • SHA512

    76aa61e91815493dc5bb40dce43229d9c89c5de58391d83bfd16aafe6c18417af0e49e43b4b129994e1b34d3e892da98ee8305972214e3b24a5b4946a7a716b6

  • SSDEEP

    1536:f55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:rMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-12-31_715a9549dd572bc493a7dfcf9cf4ed6c_gandcrab

    • Size

      73KB

    • MD5

      715a9549dd572bc493a7dfcf9cf4ed6c

    • SHA1

      95709b5a684b3f3a3b8fe2520926feca5eea206d

    • SHA256

      ed0abda36422ec513615547621551d983b116e7c814cf8d6856e1e13f113cb1c

    • SHA512

      76aa61e91815493dc5bb40dce43229d9c89c5de58391d83bfd16aafe6c18417af0e49e43b4b129994e1b34d3e892da98ee8305972214e3b24a5b4946a7a716b6

    • SSDEEP

      1536:f55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:rMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks