General

  • Target

    2025-01-13_e23fb5a051fac4377ddd859d6b33ebc4_gandcrab

  • Size

    73KB

  • Sample

    250113-c1w8va1pgy

  • MD5

    e23fb5a051fac4377ddd859d6b33ebc4

  • SHA1

    26b72f6ea3b231c50ccd3d22415b2e262ff3f918

  • SHA256

    51960f6f6f8782d59726af91d8514947fdf53d9197af70ed5aaf7ccda40a97ab

  • SHA512

    577a1817d8b10aae8a399593b2802ef8b182ebbb73b7424d906752bdcb2d77f455433011ff3e9db042c014da41db41e1f01d9a1f0debed0c072f9fabc2472f10

  • SSDEEP

    1536:h55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:JMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-13_e23fb5a051fac4377ddd859d6b33ebc4_gandcrab

    • Size

      73KB

    • MD5

      e23fb5a051fac4377ddd859d6b33ebc4

    • SHA1

      26b72f6ea3b231c50ccd3d22415b2e262ff3f918

    • SHA256

      51960f6f6f8782d59726af91d8514947fdf53d9197af70ed5aaf7ccda40a97ab

    • SHA512

      577a1817d8b10aae8a399593b2802ef8b182ebbb73b7424d906752bdcb2d77f455433011ff3e9db042c014da41db41e1f01d9a1f0debed0c072f9fabc2472f10

    • SSDEEP

      1536:h55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:JMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks