General

  • Target

    2024-12-31_5a9870675c280cde85d5c431040e52db_gandcrab

  • Size

    73KB

  • Sample

    241231-j9xdja1rez

  • MD5

    5a9870675c280cde85d5c431040e52db

  • SHA1

    2d8abb365364c103a76932ab7a70471ba4b590a8

  • SHA256

    5321db1c15e93be6cd57622e5c40dd3f04a9b4acd52d9f0c5fce23637a3bbd2e

  • SHA512

    e0c8e5344540bd9029fc2a5a7943fc46afa51332de415b0ad1470e861cac3a34b06be604bf7fa3c19acdba5dbeb5989b0801e38be5cecd00cd0130f9f01a07e7

  • SSDEEP

    1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2024-12-31_5a9870675c280cde85d5c431040e52db_gandcrab

    • Size

      73KB

    • MD5

      5a9870675c280cde85d5c431040e52db

    • SHA1

      2d8abb365364c103a76932ab7a70471ba4b590a8

    • SHA256

      5321db1c15e93be6cd57622e5c40dd3f04a9b4acd52d9f0c5fce23637a3bbd2e

    • SHA512

      e0c8e5344540bd9029fc2a5a7943fc46afa51332de415b0ad1470e861cac3a34b06be604bf7fa3c19acdba5dbeb5989b0801e38be5cecd00cd0130f9f01a07e7

    • SSDEEP

      1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks