General

  • Target

    2025-01-01_ee30d9fad769850fd663addae8bf0c5c_gandcrab

  • Size

    75KB

  • Sample

    250101-xxdbsa1rek

  • MD5

    ee30d9fad769850fd663addae8bf0c5c

  • SHA1

    ae96a2131c906e6d470a1f226d1c2a95ad8a3bcf

  • SHA256

    30808a48803b46789f39b651ae26e4d0dbf5bd90926e6b0c1c9e35527b61fe54

  • SHA512

    cebb864312df0f4f9e74f1d4c730e9e4463c7f991552eb2164559a81b40dece1c68e567c52bf92e3460b202e7daed3e4c4d43bd9251f80f7abe76047fa878b53

  • SSDEEP

    1536:FgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdvYAY:FMSjOnrmBbMqqMmr3IdE8we0Avu5r++a

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-01_ee30d9fad769850fd663addae8bf0c5c_gandcrab

    • Size

      75KB

    • MD5

      ee30d9fad769850fd663addae8bf0c5c

    • SHA1

      ae96a2131c906e6d470a1f226d1c2a95ad8a3bcf

    • SHA256

      30808a48803b46789f39b651ae26e4d0dbf5bd90926e6b0c1c9e35527b61fe54

    • SHA512

      cebb864312df0f4f9e74f1d4c730e9e4463c7f991552eb2164559a81b40dece1c68e567c52bf92e3460b202e7daed3e4c4d43bd9251f80f7abe76047fa878b53

    • SSDEEP

      1536:FgSeGDjtQhnwmmB0yjMqqUM2mr3IdE8mne0Avu5r++yy7CA7GcIaapavdvYAY:FMSjOnrmBbMqqMmr3IdE8we0Avu5r++a

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks