General

  • Target

    2025-01-04_d60f85d37bc7d6d4ec8f24f81778e83e_gandcrab

  • Size

    201KB

  • Sample

    250104-fqknvatlat

  • MD5

    d60f85d37bc7d6d4ec8f24f81778e83e

  • SHA1

    38730084b8d0b310f320b76ffd2c416ba29756c0

  • SHA256

    7ac562b71bcdeb7148f6d52a0ea383201d50c6368aa459bd9e07c4f46b1ecd02

  • SHA512

    f478ad73aaad2b67bf309e631ce516310d2a2c7a3b9082c84d6466899ae51a53e4cf37dfdefe7bbbac3658937b56bddc0db9c289b9f3a213a863e4dc5ad5f16d

  • SSDEEP

    6144:7XjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:7TOnYqn6cuLiExpQJ98eCgoo2oTO3

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-04_d60f85d37bc7d6d4ec8f24f81778e83e_gandcrab

    • Size

      201KB

    • MD5

      d60f85d37bc7d6d4ec8f24f81778e83e

    • SHA1

      38730084b8d0b310f320b76ffd2c416ba29756c0

    • SHA256

      7ac562b71bcdeb7148f6d52a0ea383201d50c6368aa459bd9e07c4f46b1ecd02

    • SHA512

      f478ad73aaad2b67bf309e631ce516310d2a2c7a3b9082c84d6466899ae51a53e4cf37dfdefe7bbbac3658937b56bddc0db9c289b9f3a213a863e4dc5ad5f16d

    • SSDEEP

      6144:7XjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:7TOnYqn6cuLiExpQJ98eCgoo2oTO3

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks