General

  • Target

    2025-01-04_3d94cf35b03f755204ccb7101dcf616a_gandcrab

  • Size

    288KB

  • Sample

    250104-eqmmrs1jgt

  • MD5

    3d94cf35b03f755204ccb7101dcf616a

  • SHA1

    54d3388f5cd5d8384d9839c471476f61198f1a17

  • SHA256

    cb6ab720a382ddbe5eebe3c599209f052d6b6bde14268b5140bd143721c5a83e

  • SHA512

    2b5000879045d00cd42a740735761317048913d31fe1a7ddff8ef5d8950b2c0592dfa4d274f0ea9c0251974d31cdd1a907d9ceb4816a666a37b11ae0399a7008

  • SSDEEP

    6144:wXjOnr6YqqM4vd07D7RbNFp6Nsd1/WBARmwKZV/mWvxzXjenfj1NdlPbURvULlAm:wTOnYqMc07XRoedVWB9wO0WvBs1NdlPF

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-04_3d94cf35b03f755204ccb7101dcf616a_gandcrab

    • Size

      288KB

    • MD5

      3d94cf35b03f755204ccb7101dcf616a

    • SHA1

      54d3388f5cd5d8384d9839c471476f61198f1a17

    • SHA256

      cb6ab720a382ddbe5eebe3c599209f052d6b6bde14268b5140bd143721c5a83e

    • SHA512

      2b5000879045d00cd42a740735761317048913d31fe1a7ddff8ef5d8950b2c0592dfa4d274f0ea9c0251974d31cdd1a907d9ceb4816a666a37b11ae0399a7008

    • SSDEEP

      6144:wXjOnr6YqqM4vd07D7RbNFp6Nsd1/WBARmwKZV/mWvxzXjenfj1NdlPbURvULlAm:wTOnYqMc07XRoedVWB9wO0WvBs1NdlPF

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks