General

  • Target

    2025-01-07_526a97e537d44e51caa9b91656ace7b4_gandcrab

  • Size

    201KB

  • Sample

    250107-ddfg9asqer

  • MD5

    526a97e537d44e51caa9b91656ace7b4

  • SHA1

    50f61dd09b471a0f2075a1fd73cfa5121147b8ff

  • SHA256

    dafa8368dfe10fb574248b383969f7798869dc8966231091c26624c24d80aba2

  • SHA512

    7769cc430a74fe4dd6b63ef4c99dd64c161d9c561919d5bbfac8311fd9ef9fb358d5eb554b7230abba7aa9037dd76e516c6470a55dba645074154fcc77a1e3f6

  • SSDEEP

    6144:yXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:yTOnYqn6cuLiExpQJ98eCgoo2oTO3

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-07_526a97e537d44e51caa9b91656ace7b4_gandcrab

    • Size

      201KB

    • MD5

      526a97e537d44e51caa9b91656ace7b4

    • SHA1

      50f61dd09b471a0f2075a1fd73cfa5121147b8ff

    • SHA256

      dafa8368dfe10fb574248b383969f7798869dc8966231091c26624c24d80aba2

    • SHA512

      7769cc430a74fe4dd6b63ef4c99dd64c161d9c561919d5bbfac8311fd9ef9fb358d5eb554b7230abba7aa9037dd76e516c6470a55dba645074154fcc77a1e3f6

    • SSDEEP

      6144:yXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:yTOnYqn6cuLiExpQJ98eCgoo2oTO3

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks