General

  • Target

    2025-01-05_f06ca3e490e17336ca82f779e60ca5d2_gandcrab

  • Size

    288KB

  • Sample

    250105-gkx8estrbv

  • MD5

    f06ca3e490e17336ca82f779e60ca5d2

  • SHA1

    ab86b3c38da3c981041953590ca15a8694899ab7

  • SHA256

    9cd32382f74acb9b887c174fc0eab8d5b473ba74fbbf0ee1eb95ef30961a1337

  • SHA512

    55c74a22a8aa308b31302267fd4b3064efded1677ebd98525b26f3a0ec63417b78e4922ef419e11722ddb6db4ee5d8e69969bda1bf75e7fb0999b8907330654e

  • SSDEEP

    6144:aXjOnr6aqqDL64vdxZxwZ0J1ee6f3WvTpFtHfS5KsW1K2kNy/rK4WII56YssdLwC:aTOneqn6cxZxwGwe6fc1THfS5XYkNWKz

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-05_f06ca3e490e17336ca82f779e60ca5d2_gandcrab

    • Size

      288KB

    • MD5

      f06ca3e490e17336ca82f779e60ca5d2

    • SHA1

      ab86b3c38da3c981041953590ca15a8694899ab7

    • SHA256

      9cd32382f74acb9b887c174fc0eab8d5b473ba74fbbf0ee1eb95ef30961a1337

    • SHA512

      55c74a22a8aa308b31302267fd4b3064efded1677ebd98525b26f3a0ec63417b78e4922ef419e11722ddb6db4ee5d8e69969bda1bf75e7fb0999b8907330654e

    • SSDEEP

      6144:aXjOnr6aqqDL64vdxZxwZ0J1ee6f3WvTpFtHfS5KsW1K2kNy/rK4WII56YssdLwC:aTOneqn6cxZxwGwe6fc1THfS5XYkNWKz

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks