General

  • Target

    2025-01-13_e2716c95eb12323c3fac526370a0cb40_gandcrab

  • Size

    73KB

  • Sample

    250113-zdr2yaxjdt

  • MD5

    e2716c95eb12323c3fac526370a0cb40

  • SHA1

    c55e8339d8ef8b6d0e706f942df792e943757fc9

  • SHA256

    7d44c1269ceb1dbc1d1f4c7e91a10dbe12c0ed761c2629189928e45d3c21902e

  • SHA512

    1485d83c31a9277863b796d9d6eb49eaaaeb1d3d20880160f33d5d4ee1916b8d3c16aea1b0ec0a52a48036fd4e59e7df7eab9bb8e7257a51e3fb5c4a402f5fa2

  • SSDEEP

    1536:j55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:/MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-13_e2716c95eb12323c3fac526370a0cb40_gandcrab

    • Size

      73KB

    • MD5

      e2716c95eb12323c3fac526370a0cb40

    • SHA1

      c55e8339d8ef8b6d0e706f942df792e943757fc9

    • SHA256

      7d44c1269ceb1dbc1d1f4c7e91a10dbe12c0ed761c2629189928e45d3c21902e

    • SHA512

      1485d83c31a9277863b796d9d6eb49eaaaeb1d3d20880160f33d5d4ee1916b8d3c16aea1b0ec0a52a48036fd4e59e7df7eab9bb8e7257a51e3fb5c4a402f5fa2

    • SSDEEP

      1536:j55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:/MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks