General

  • Target

    2025-01-12_b9fd3b7b84cfffa8725da8a3186321e1_gandcrab

  • Size

    73KB

  • Sample

    250112-2f8htavnek

  • MD5

    b9fd3b7b84cfffa8725da8a3186321e1

  • SHA1

    46d1dc61ad39e16f1da9964cebfdf54ca960ff97

  • SHA256

    84530818d6571cffc18e4ed9cd8448f122f028c66b03e9c7914f27f01ac71316

  • SHA512

    fa116964eb719022ee6ff039583966d5803277f37133ffae040150f7050cf1c7d8c0aba8010e89552339cfcebd23d8507218feb01f3e39368eea6e6625d46314

  • SSDEEP

    1536:655u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:gMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-12_b9fd3b7b84cfffa8725da8a3186321e1_gandcrab

    • Size

      73KB

    • MD5

      b9fd3b7b84cfffa8725da8a3186321e1

    • SHA1

      46d1dc61ad39e16f1da9964cebfdf54ca960ff97

    • SHA256

      84530818d6571cffc18e4ed9cd8448f122f028c66b03e9c7914f27f01ac71316

    • SHA512

      fa116964eb719022ee6ff039583966d5803277f37133ffae040150f7050cf1c7d8c0aba8010e89552339cfcebd23d8507218feb01f3e39368eea6e6625d46314

    • SSDEEP

      1536:655u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:gMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks