General

  • Target

    2025-01-02_c962a52995de244928e6c5eeeb549e47_gandcrab

  • Size

    75KB

  • Sample

    250102-jypjjsvnap

  • MD5

    c962a52995de244928e6c5eeeb549e47

  • SHA1

    e6d9d11e603e4b424af0bc397b52eb65f93e1acb

  • SHA256

    abbda8f3550235ba4ecc4b9ae38ab781bbbab6266d6d6c2480dc2d77108241ec

  • SHA512

    d7a09090358b158904f0e86ed9b780d55d03cf9b2329466d23f3f0cf6807616050c9a68705cfd368c9d6638e9f66b34bf361aa574cea5886ad232c5beee4c142

  • SSDEEP

    1536:Z555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rA:mMSjOnrmBxMqqDL2/mr3IdE8we0Avu50

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-02_c962a52995de244928e6c5eeeb549e47_gandcrab

    • Size

      75KB

    • MD5

      c962a52995de244928e6c5eeeb549e47

    • SHA1

      e6d9d11e603e4b424af0bc397b52eb65f93e1acb

    • SHA256

      abbda8f3550235ba4ecc4b9ae38ab781bbbab6266d6d6c2480dc2d77108241ec

    • SHA512

      d7a09090358b158904f0e86ed9b780d55d03cf9b2329466d23f3f0cf6807616050c9a68705cfd368c9d6638e9f66b34bf361aa574cea5886ad232c5beee4c142

    • SSDEEP

      1536:Z555555555555pmgSeGDjtQhnwmmB0yJMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rA:mMSjOnrmBxMqqDL2/mr3IdE8we0Avu50

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks