General

  • Target

    2025-01-22_03770e084ab17645455e00b205a63247_gandcrab

  • Size

    73KB

  • Sample

    250122-ssnvhatmgq

  • MD5

    03770e084ab17645455e00b205a63247

  • SHA1

    47114c9836a7290db2776ba34f4fa70f44255de9

  • SHA256

    242d0dc35e77c31ef6c3b246027714bd88930b919b9ad9a178b471a6ade5c952

  • SHA512

    6fce1b3fd338fae9c52e3d7f356de737131658d4b3fabf85317637ac612f1fb4101d1269d45d08832e0edb92432eefd362f082d2f7a8fe19d2d3f7ec142411f3

  • SSDEEP

    1536:T555555555555pmgSeGDjtQhnwmmB0yXgMqqU+2bbbAV2/S2mr3IdE8mne0Avu5V:UMSjOnrmBoMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-22_03770e084ab17645455e00b205a63247_gandcrab

    • Size

      73KB

    • MD5

      03770e084ab17645455e00b205a63247

    • SHA1

      47114c9836a7290db2776ba34f4fa70f44255de9

    • SHA256

      242d0dc35e77c31ef6c3b246027714bd88930b919b9ad9a178b471a6ade5c952

    • SHA512

      6fce1b3fd338fae9c52e3d7f356de737131658d4b3fabf85317637ac612f1fb4101d1269d45d08832e0edb92432eefd362f082d2f7a8fe19d2d3f7ec142411f3

    • SSDEEP

      1536:T555555555555pmgSeGDjtQhnwmmB0yXgMqqU+2bbbAV2/S2mr3IdE8mne0Avu5V:UMSjOnrmBoMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks