General

  • Target

    2025-01-14_cde8bdaa69e71b29773120b464653eeb_gandcrab

  • Size

    73KB

  • Sample

    250114-jfamnstler

  • MD5

    cde8bdaa69e71b29773120b464653eeb

  • SHA1

    be9ae10f0d2702c30633631c2a50ca57db3f4382

  • SHA256

    01f8b31a12bbea42d06add0055c322c6de8b7d4fc8c2556f93fd3c46c7ef3b8d

  • SHA512

    7513714ea5ef27f161cd4aaa90eca7a5303d2fc74f030e47e0a2961a1c3f709afe4ae964228f34391e6a9349ca2d111dc7eccb0e89c2f85d7f19f506530a5b8a

  • SSDEEP

    1536:255u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:8MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-14_cde8bdaa69e71b29773120b464653eeb_gandcrab

    • Size

      73KB

    • MD5

      cde8bdaa69e71b29773120b464653eeb

    • SHA1

      be9ae10f0d2702c30633631c2a50ca57db3f4382

    • SHA256

      01f8b31a12bbea42d06add0055c322c6de8b7d4fc8c2556f93fd3c46c7ef3b8d

    • SHA512

      7513714ea5ef27f161cd4aaa90eca7a5303d2fc74f030e47e0a2961a1c3f709afe4ae964228f34391e6a9349ca2d111dc7eccb0e89c2f85d7f19f506530a5b8a

    • SSDEEP

      1536:255u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:8MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks