General

  • Target

    2025-01-08_36597519596c0e0ee27e74a128c88b06_gandcrab

  • Size

    573KB

  • Sample

    250108-jqd3vasrfk

  • MD5

    36597519596c0e0ee27e74a128c88b06

  • SHA1

    71d207620966ea4545cf7f4d0768be9d88ca960d

  • SHA256

    19fd27ef8f058a7c4b7d163698eb5fa554f7b6ccebdad62763ae7c014197bd0d

  • SHA512

    6f62f3bd3c62fe2703479b5a2c42743432937c123148c50d999f7d566ff8fbe9c5cc3d1542cbf6f80f3af1996850155d212576596bdfdc047f37045023aa6c40

  • SSDEEP

    12288:1TOneqn6cDKWqQqkd1BtOkodxduog/TXJa/x82IErOJs:Z1+6cDKWNGuog/TXJmxO

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-08_36597519596c0e0ee27e74a128c88b06_gandcrab

    • Size

      573KB

    • MD5

      36597519596c0e0ee27e74a128c88b06

    • SHA1

      71d207620966ea4545cf7f4d0768be9d88ca960d

    • SHA256

      19fd27ef8f058a7c4b7d163698eb5fa554f7b6ccebdad62763ae7c014197bd0d

    • SHA512

      6f62f3bd3c62fe2703479b5a2c42743432937c123148c50d999f7d566ff8fbe9c5cc3d1542cbf6f80f3af1996850155d212576596bdfdc047f37045023aa6c40

    • SSDEEP

      12288:1TOneqn6cDKWqQqkd1BtOkodxduog/TXJa/x82IErOJs:Z1+6cDKWNGuog/TXJmxO

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks