General

  • Target

    2025-01-16_69bdba77851768f192a5da3a95370da8_gandcrab

  • Size

    73KB

  • Sample

    250116-g9pycawqft

  • MD5

    69bdba77851768f192a5da3a95370da8

  • SHA1

    18c5be418172545fb91cf7426cafa283118848ca

  • SHA256

    653ea58908c5fa7be1724e05f6c25546a4ffee244fe00a4e82be1b5c8aaef0d6

  • SHA512

    df33a3a270c0367ead88b8e0a64867bd2bfd2c4612b35a9b96c24787e869fb8fdb5df380896f4d8a9ba46f3706206035db2fb26aefcf2e546e95a973e19a90ca

  • SSDEEP

    1536:C55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:4MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-16_69bdba77851768f192a5da3a95370da8_gandcrab

    • Size

      73KB

    • MD5

      69bdba77851768f192a5da3a95370da8

    • SHA1

      18c5be418172545fb91cf7426cafa283118848ca

    • SHA256

      653ea58908c5fa7be1724e05f6c25546a4ffee244fe00a4e82be1b5c8aaef0d6

    • SHA512

      df33a3a270c0367ead88b8e0a64867bd2bfd2c4612b35a9b96c24787e869fb8fdb5df380896f4d8a9ba46f3706206035db2fb26aefcf2e546e95a973e19a90ca

    • SSDEEP

      1536:C55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:4MSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks