General

  • Target

    2025-01-07_a278d93afc5559b74d9417750a37da11_gandcrab

  • Size

    201KB

  • Sample

    250107-lh5a6svnfw

  • MD5

    a278d93afc5559b74d9417750a37da11

  • SHA1

    e11bf724d20837416335c4289f100fc8f17f201f

  • SHA256

    6458956c0cad97a32e72224275140b0420223e37fe6c816d6cfd5a5368bbf3b4

  • SHA512

    5826f6e5773ce22ee89b1a96e1e5dbb1e6e036c414f84b09b6cbacb00fe717d5fd11011a78998c14188bb904c73090b03d45977c330dbcc0a67503ce7f29142b

  • SSDEEP

    6144:ZXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:ZTOnYqn6cuLiExpQJ98eCgoo2oTO3

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-07_a278d93afc5559b74d9417750a37da11_gandcrab

    • Size

      201KB

    • MD5

      a278d93afc5559b74d9417750a37da11

    • SHA1

      e11bf724d20837416335c4289f100fc8f17f201f

    • SHA256

      6458956c0cad97a32e72224275140b0420223e37fe6c816d6cfd5a5368bbf3b4

    • SHA512

      5826f6e5773ce22ee89b1a96e1e5dbb1e6e036c414f84b09b6cbacb00fe717d5fd11011a78998c14188bb904c73090b03d45977c330dbcc0a67503ce7f29142b

    • SSDEEP

      6144:ZXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:ZTOnYqn6cuLiExpQJ98eCgoo2oTO3

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks