General

  • Target

    2025-01-01_e1673051ffd8c791ff9d56fb658e1bf1_gandcrab

  • Size

    286KB

  • Sample

    250101-swdtpssqgp

  • MD5

    e1673051ffd8c791ff9d56fb658e1bf1

  • SHA1

    485eec06d4e68e3e0cb9a39c0529d1d1bfb3decf

  • SHA256

    d6d5ca6a6cfc458c8d2084859864d99d2bf2dcca663078a34711b68b9d1f1ace

  • SHA512

    27bde4deda39b95f7639801cfb7ba85fb2313c02a5bd0d7eda75b96847c0d116b5e24391841ddab4a01c5ba904af18bf446ccf534a30aaea85a4f56409f483c8

  • SSDEEP

    6144:kXjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:kTOnYqn6cwrm1sB7F51YD+lW8qeiO/sf

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-01_e1673051ffd8c791ff9d56fb658e1bf1_gandcrab

    • Size

      286KB

    • MD5

      e1673051ffd8c791ff9d56fb658e1bf1

    • SHA1

      485eec06d4e68e3e0cb9a39c0529d1d1bfb3decf

    • SHA256

      d6d5ca6a6cfc458c8d2084859864d99d2bf2dcca663078a34711b68b9d1f1ace

    • SHA512

      27bde4deda39b95f7639801cfb7ba85fb2313c02a5bd0d7eda75b96847c0d116b5e24391841ddab4a01c5ba904af18bf446ccf534a30aaea85a4f56409f483c8

    • SSDEEP

      6144:kXjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:kTOnYqn6cwrm1sB7F51YD+lW8qeiO/sf

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks