Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-01-01_d21bc6c957d283637b5c62be717b6a1f_gandcrab

  • Size

    73KB

  • Sample

    250101-y13xaavkcm

  • MD5

    d21bc6c957d283637b5c62be717b6a1f

  • SHA1

    8595a79e84f772f9c2246cc659c36ff2a2185769

  • SHA256

    dd8a5844208a3e5615dd797fbb272d6d0873af715cddb9f0b7ec0fac6f8ab0e8

  • SHA512

    49440a4d12c78d858350d97ccd44814b76a61530c9668d85e497700164eb71d3cfbabaa902607b6087970ed007601ec39a1d2d862e0f284ad7b43430b01e2d18

  • SSDEEP

    1536:b555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:8MSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-01_d21bc6c957d283637b5c62be717b6a1f_gandcrab

    • Size

      73KB

    • MD5

      d21bc6c957d283637b5c62be717b6a1f

    • SHA1

      8595a79e84f772f9c2246cc659c36ff2a2185769

    • SHA256

      dd8a5844208a3e5615dd797fbb272d6d0873af715cddb9f0b7ec0fac6f8ab0e8

    • SHA512

      49440a4d12c78d858350d97ccd44814b76a61530c9668d85e497700164eb71d3cfbabaa902607b6087970ed007601ec39a1d2d862e0f284ad7b43430b01e2d18

    • SSDEEP

      1536:b555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:8MSjOnrmBxMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.