General

  • Target

    2025-01-04_5f57a7e6df605ba4edd833434c87a93d_gandcrab

  • Size

    156KB

  • Sample

    250104-dxkw3symgv

  • MD5

    5f57a7e6df605ba4edd833434c87a93d

  • SHA1

    abcd1d2d166af6b9757f35044559839686467bd0

  • SHA256

    fdeba009908d5ffc67f42682908445a3db5c84323f2b80d702df5e1f6fa383ef

  • SHA512

    7381a6b6c03fe01df6a125b424ef5e3594d387c6cb23fda506cf93e07220cb632a9d741cb1278e1b42ccfe77ded90f3d8c4ae6fcbf8ed9ff3794da6577ca103f

  • SSDEEP

    3072:2MSjOnrmBTMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdQjFjG82RG3lYv/G3p9BLs:2XjOnr6gqqDL64vdsFjz2RG3lN/5GQQP

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-04_5f57a7e6df605ba4edd833434c87a93d_gandcrab

    • Size

      156KB

    • MD5

      5f57a7e6df605ba4edd833434c87a93d

    • SHA1

      abcd1d2d166af6b9757f35044559839686467bd0

    • SHA256

      fdeba009908d5ffc67f42682908445a3db5c84323f2b80d702df5e1f6fa383ef

    • SHA512

      7381a6b6c03fe01df6a125b424ef5e3594d387c6cb23fda506cf93e07220cb632a9d741cb1278e1b42ccfe77ded90f3d8c4ae6fcbf8ed9ff3794da6577ca103f

    • SSDEEP

      3072:2MSjOnrmBTMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdQjFjG82RG3lYv/G3p9BLs:2XjOnr6gqqDL64vdsFjz2RG3lN/5GQQP

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks