General

  • Target

    2025-01-12_20bd33f6d87e97031bfe371a9ada8883_gandcrab

  • Size

    1.0MB

  • Sample

    250112-ct5xeatnhp

  • MD5

    20bd33f6d87e97031bfe371a9ada8883

  • SHA1

    808096881ae2002130c6be41dca2cb884c61b4b2

  • SHA256

    f1001095706199f33cb0d19ba6474edbc5c248b4da52845cc6f33bbf42f8f83e

  • SHA512

    cc1e93e7480ac0a2f46df892cea2b425cd8959f98172ceccbbca9a7fa905052e8110b0f28c0803a069620f443b624c46dc534d355e0f2589a23a09c2a9b051ad

  • SSDEEP

    24576:J3Lc1hGigXBH4snfDLhfxTdLXWVjpUVAs7ImLKrVA16yiLo+aegfN:MGigXBHvfD1f3Li9UVlerVWhN

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-12_20bd33f6d87e97031bfe371a9ada8883_gandcrab

    • Size

      1.0MB

    • MD5

      20bd33f6d87e97031bfe371a9ada8883

    • SHA1

      808096881ae2002130c6be41dca2cb884c61b4b2

    • SHA256

      f1001095706199f33cb0d19ba6474edbc5c248b4da52845cc6f33bbf42f8f83e

    • SHA512

      cc1e93e7480ac0a2f46df892cea2b425cd8959f98172ceccbbca9a7fa905052e8110b0f28c0803a069620f443b624c46dc534d355e0f2589a23a09c2a9b051ad

    • SSDEEP

      24576:J3Lc1hGigXBH4snfDLhfxTdLXWVjpUVAs7ImLKrVA16yiLo+aegfN:MGigXBHvfD1f3Li9UVlerVWhN

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks