Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-01-01_e1673051ffd8c791ff9d56fb658e1bf1_gandcrab

  • Size

    286KB

  • Sample

    250101-szhbaszph1

  • MD5

    e1673051ffd8c791ff9d56fb658e1bf1

  • SHA1

    485eec06d4e68e3e0cb9a39c0529d1d1bfb3decf

  • SHA256

    d6d5ca6a6cfc458c8d2084859864d99d2bf2dcca663078a34711b68b9d1f1ace

  • SHA512

    27bde4deda39b95f7639801cfb7ba85fb2313c02a5bd0d7eda75b96847c0d116b5e24391841ddab4a01c5ba904af18bf446ccf534a30aaea85a4f56409f483c8

  • SSDEEP

    6144:kXjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:kTOnYqn6cwrm1sB7F51YD+lW8qeiO/sf

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-01_e1673051ffd8c791ff9d56fb658e1bf1_gandcrab

    • Size

      286KB

    • MD5

      e1673051ffd8c791ff9d56fb658e1bf1

    • SHA1

      485eec06d4e68e3e0cb9a39c0529d1d1bfb3decf

    • SHA256

      d6d5ca6a6cfc458c8d2084859864d99d2bf2dcca663078a34711b68b9d1f1ace

    • SHA512

      27bde4deda39b95f7639801cfb7ba85fb2313c02a5bd0d7eda75b96847c0d116b5e24391841ddab4a01c5ba904af18bf446ccf534a30aaea85a4f56409f483c8

    • SSDEEP

      6144:kXjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:kTOnYqn6cwrm1sB7F51YD+lW8qeiO/sf

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.