General

  • Target

    2025-01-14_72260b6f9cbe24881a14597d6febffad_gandcrab

  • Size

    73KB

  • Sample

    250114-c1ph1atqes

  • MD5

    72260b6f9cbe24881a14597d6febffad

  • SHA1

    7edd017f7ad95bf12c8d8d4e18b41f9cfbd302f3

  • SHA256

    4d1ace574f5eaa08699fdbcb5abf13e15ffb746854e336a60e76f49d447d11f9

  • SHA512

    53c4732572a7209ffc86d0a1bfca0ec15225778eb69fee257703db17e04764492196fd577469fbb2ec001587c838ab63ae95dc8179c774d14f6e7a49b1a66387

  • SSDEEP

    1536:B55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:pMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-14_72260b6f9cbe24881a14597d6febffad_gandcrab

    • Size

      73KB

    • MD5

      72260b6f9cbe24881a14597d6febffad

    • SHA1

      7edd017f7ad95bf12c8d8d4e18b41f9cfbd302f3

    • SHA256

      4d1ace574f5eaa08699fdbcb5abf13e15ffb746854e336a60e76f49d447d11f9

    • SHA512

      53c4732572a7209ffc86d0a1bfca0ec15225778eb69fee257703db17e04764492196fd577469fbb2ec001587c838ab63ae95dc8179c774d14f6e7a49b1a66387

    • SSDEEP

      1536:B55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:pMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks