General

  • Target

    2025-01-22_101bcd3e590c3141c54b71ed50823426_gandcrab

  • Size

    73KB

  • Sample

    250122-x3fdbsskgp

  • MD5

    101bcd3e590c3141c54b71ed50823426

  • SHA1

    b59633d754f91e708528801bf98de0ae5c0eda2e

  • SHA256

    006cdf5c73c419e1de8e573c2575b853e4f0cacf8e80b4bdf1f6795ae0c859fb

  • SHA512

    e94edecd80266c5aeb733c111b50a6135cbcb54b88cddb3febdf058d0a64c3989c746beb8c03230c236123196ad79be4a7a362054e18a7b246c9b630a3bcbdb0

  • SSDEEP

    1536:F55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:NMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-22_101bcd3e590c3141c54b71ed50823426_gandcrab

    • Size

      73KB

    • MD5

      101bcd3e590c3141c54b71ed50823426

    • SHA1

      b59633d754f91e708528801bf98de0ae5c0eda2e

    • SHA256

      006cdf5c73c419e1de8e573c2575b853e4f0cacf8e80b4bdf1f6795ae0c859fb

    • SHA512

      e94edecd80266c5aeb733c111b50a6135cbcb54b88cddb3febdf058d0a64c3989c746beb8c03230c236123196ad79be4a7a362054e18a7b246c9b630a3bcbdb0

    • SSDEEP

      1536:F55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:NMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks