General

  • Target

    2025-01-23_134fb8dc02b29ff449c2c70718bc0480_gandcrab

  • Size

    73KB

  • Sample

    250123-aqtnvssrcv

  • MD5

    134fb8dc02b29ff449c2c70718bc0480

  • SHA1

    8a5b04578df6c8cc35c1e804afa67f3d391452d9

  • SHA256

    4410210e7f9d7e97600704f6fc71726654f540fad3975f08d3aa7fd7ee3504c6

  • SHA512

    5451158ad8326037cbdd016490c32ff74ddb98c05a7cc57abf71d1244898daddbcf1fcf0e87df43ec971e0fe50eed4154e742c1fe087f622b1f38d9eab245773

  • SSDEEP

    1536:l55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:tMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-23_134fb8dc02b29ff449c2c70718bc0480_gandcrab

    • Size

      73KB

    • MD5

      134fb8dc02b29ff449c2c70718bc0480

    • SHA1

      8a5b04578df6c8cc35c1e804afa67f3d391452d9

    • SHA256

      4410210e7f9d7e97600704f6fc71726654f540fad3975f08d3aa7fd7ee3504c6

    • SHA512

      5451158ad8326037cbdd016490c32ff74ddb98c05a7cc57abf71d1244898daddbcf1fcf0e87df43ec971e0fe50eed4154e742c1fe087f622b1f38d9eab245773

    • SSDEEP

      1536:l55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:tMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks