General

  • Target

    2025-01-13_43d135ff50d5ddd77f26d9c2fcf84ec4_gandcrab

  • Size

    201KB

  • Sample

    250113-cw679a1nbs

  • MD5

    43d135ff50d5ddd77f26d9c2fcf84ec4

  • SHA1

    7aceff4cdf7d76e63c2a62c280cb9acfecfc60a8

  • SHA256

    6e018e47e10d531e21d71bafc3e0bfa958b32bb4abe788408f81107c815030a2

  • SHA512

    32caeca2bdbf36c44df7f23e957cdd3e20addfd97f09a40dbeea8e300fc36a948e6b62398b1729107d165e4d9e5e00d7be1fd25f8f0c6f076c3c2242d32ce46e

  • SSDEEP

    6144:iXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:iTOnYqn6cuLiExpQJ98eCgoo2oTO3

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-13_43d135ff50d5ddd77f26d9c2fcf84ec4_gandcrab

    • Size

      201KB

    • MD5

      43d135ff50d5ddd77f26d9c2fcf84ec4

    • SHA1

      7aceff4cdf7d76e63c2a62c280cb9acfecfc60a8

    • SHA256

      6e018e47e10d531e21d71bafc3e0bfa958b32bb4abe788408f81107c815030a2

    • SHA512

      32caeca2bdbf36c44df7f23e957cdd3e20addfd97f09a40dbeea8e300fc36a948e6b62398b1729107d165e4d9e5e00d7be1fd25f8f0c6f076c3c2242d32ce46e

    • SSDEEP

      6144:iXjOnr6gqqDL64vduLiEpbpQJio8eiZNgoo2FWTOy2:iTOnYqn6cuLiExpQJ98eCgoo2oTO3

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks