General

  • Target

    2025-01-04_184e133546c79a6917bb41f30903ac73_gandcrab

  • Size

    201KB

  • Sample

    250104-dw49bs1mbq

  • MD5

    184e133546c79a6917bb41f30903ac73

  • SHA1

    2795eb6f82dbccd03ef0e2e415cd7fe6b786f745

  • SHA256

    60b16866c1da95b5ae8dcab7700d7f03844ea2814639db1a3429700ba2303a7e

  • SHA512

    4e4086b46eae61d38cd75f6efe139f59776ae9fe2b7e7d7fe05a50f2d84d1c91e9874685658bacf88ad1e730fa65dbe916333ad3d271e4b87d23fa0b262c0aea

  • SSDEEP

    6144:qXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:qTOnYqn6cuLiExpQJ98eCgoo2oTO3

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-04_184e133546c79a6917bb41f30903ac73_gandcrab

    • Size

      201KB

    • MD5

      184e133546c79a6917bb41f30903ac73

    • SHA1

      2795eb6f82dbccd03ef0e2e415cd7fe6b786f745

    • SHA256

      60b16866c1da95b5ae8dcab7700d7f03844ea2814639db1a3429700ba2303a7e

    • SHA512

      4e4086b46eae61d38cd75f6efe139f59776ae9fe2b7e7d7fe05a50f2d84d1c91e9874685658bacf88ad1e730fa65dbe916333ad3d271e4b87d23fa0b262c0aea

    • SSDEEP

      6144:qXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:qTOnYqn6cuLiExpQJ98eCgoo2oTO3

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks