General

  • Target

    2025-01-02_7d7aa4e66789ac98f402fe8aa46e77e3_gandcrab

  • Size

    1.0MB

  • Sample

    250102-ledztavrgx

  • MD5

    7d7aa4e66789ac98f402fe8aa46e77e3

  • SHA1

    f37c21855e6abfb85a069d52a2f325aed4dae47d

  • SHA256

    0980103bc4b8d1f2a0195f93430e7685bef931005faeafde9feec7b463c505d2

  • SHA512

    7a6fe468739610ad5ff142b7d1e5a737c57cc88b519320c01358760dd396fe5b20e56a0f4932e55655047d5263cb54770abc425410c4aa9e472513d0a4df657f

  • SSDEEP

    24576:L3Lc1hGigXBH4snfDLhfxTdLXWVjpUVAs7ImLKrVA16yiLo+aegfN:+GigXBHvfD1f3Li9UVlerVWhN

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-02_7d7aa4e66789ac98f402fe8aa46e77e3_gandcrab

    • Size

      1.0MB

    • MD5

      7d7aa4e66789ac98f402fe8aa46e77e3

    • SHA1

      f37c21855e6abfb85a069d52a2f325aed4dae47d

    • SHA256

      0980103bc4b8d1f2a0195f93430e7685bef931005faeafde9feec7b463c505d2

    • SHA512

      7a6fe468739610ad5ff142b7d1e5a737c57cc88b519320c01358760dd396fe5b20e56a0f4932e55655047d5263cb54770abc425410c4aa9e472513d0a4df657f

    • SSDEEP

      24576:L3Lc1hGigXBH4snfDLhfxTdLXWVjpUVAs7ImLKrVA16yiLo+aegfN:+GigXBHvfD1f3Li9UVlerVWhN

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks