Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-01-16_89e5469969d5de9ec6b984e870358d05_gandcrab

  • Size

    73KB

  • Sample

    250116-3gbe5svmhr

  • MD5

    89e5469969d5de9ec6b984e870358d05

  • SHA1

    af49af0b2dd0a108560102a6b658c7972fe662f0

  • SHA256

    ac4376b63a535b7e99d79ebcd4591e6b3e927c6ff119dd5912d5a830b5de448b

  • SHA512

    bae70b152cf93e8ce275b876f1e42a7836c7c287f7f9026f4f25f39e8f492adb3dbbf9a42679a8c04666d17c317b7fba3e9ff92ab8db75b180417672225bd81a

  • SSDEEP

    1536:Q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:iMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-16_89e5469969d5de9ec6b984e870358d05_gandcrab

    • Size

      73KB

    • MD5

      89e5469969d5de9ec6b984e870358d05

    • SHA1

      af49af0b2dd0a108560102a6b658c7972fe662f0

    • SHA256

      ac4376b63a535b7e99d79ebcd4591e6b3e927c6ff119dd5912d5a830b5de448b

    • SHA512

      bae70b152cf93e8ce275b876f1e42a7836c7c287f7f9026f4f25f39e8f492adb3dbbf9a42679a8c04666d17c317b7fba3e9ff92ab8db75b180417672225bd81a

    • SSDEEP

      1536:Q55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:iMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.