General

  • Target

    2024-12-31_57a6073e265c7ea7a872286b9b337236_gandcrab

  • Size

    73KB

  • Sample

    241231-j9sqcatqar

  • MD5

    57a6073e265c7ea7a872286b9b337236

  • SHA1

    7bfbc400765ffc1b4cef6727ff6b839f877697c2

  • SHA256

    6c087158aea563daf5c0e845931820bf2f6fc3210dcdecec6c9effd5b18e360a

  • SHA512

    78ca78c40193cb5d9e641d6f8ac4b0f46c03a766ea95680a110ccbf70abc4674b9adbc2d9da45f29888ad749fc29a61e999048fe0a4ac5a3824bdd5c2db52ef9

  • SSDEEP

    1536:z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:vMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-12-31_57a6073e265c7ea7a872286b9b337236_gandcrab

    • Size

      73KB

    • MD5

      57a6073e265c7ea7a872286b9b337236

    • SHA1

      7bfbc400765ffc1b4cef6727ff6b839f877697c2

    • SHA256

      6c087158aea563daf5c0e845931820bf2f6fc3210dcdecec6c9effd5b18e360a

    • SHA512

      78ca78c40193cb5d9e641d6f8ac4b0f46c03a766ea95680a110ccbf70abc4674b9adbc2d9da45f29888ad749fc29a61e999048fe0a4ac5a3824bdd5c2db52ef9

    • SSDEEP

      1536:z55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:vMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks