General

  • Target

    2025-01-04_24999b12642ecd409b86c056d85725ad_gandcrab

  • Size

    286KB

  • Sample

    250104-emllaszrbx

  • MD5

    24999b12642ecd409b86c056d85725ad

  • SHA1

    0d53a3108db3913a2208df4affd8e6d7e14b1d95

  • SHA256

    52ae4c92aaed4cb66f354f34c10507713eb0885d1a4aa1394a5b5386f966a4d8

  • SHA512

    5fe7d98c79f373b7ecd53c3dc45cc1e77d7bb6d44c756dda4f6e933aa219d6e796bec012c6892ce0abfff9285000d1996062452f07229cd0fa5526b88d0d3a25

  • SSDEEP

    6144:+XjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:+TOnYqn6cwrm1sB7F51YD+lW8qeiO/sf

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-04_24999b12642ecd409b86c056d85725ad_gandcrab

    • Size

      286KB

    • MD5

      24999b12642ecd409b86c056d85725ad

    • SHA1

      0d53a3108db3913a2208df4affd8e6d7e14b1d95

    • SHA256

      52ae4c92aaed4cb66f354f34c10507713eb0885d1a4aa1394a5b5386f966a4d8

    • SHA512

      5fe7d98c79f373b7ecd53c3dc45cc1e77d7bb6d44c756dda4f6e933aa219d6e796bec012c6892ce0abfff9285000d1996062452f07229cd0fa5526b88d0d3a25

    • SSDEEP

      6144:+XjOnr6gqqDL64vd0xrm1sSfa7F5pDYD+x/W836eiO/swGXuY2YJ+p3ssqpsYOH4:+TOnYqn6cwrm1sB7F51YD+lW8qeiO/sf

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks