General

  • Target

    2025-01-23_1cc4c11cbdce950fe6629c8c4ace1e47_gandcrab

  • Size

    73KB

  • Sample

    250123-lej6tsvnbq

  • MD5

    1cc4c11cbdce950fe6629c8c4ace1e47

  • SHA1

    38730a89e6f9d69b16bed16ed4ce49a3f5594ad2

  • SHA256

    807486c691745df9703f3b8931b2505cc20bb7d8a6e24b5fbb698af1bbc1b729

  • SHA512

    5b1b039b2a590520f0b79e1a4b8fc0905a326e4bd6cc3115db5a8dc93a7224b09ee2d19fe087da5a67c925694f0631d88feca128cc663c11a8650a46afbdde8d

  • SSDEEP

    1536:r55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:XMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-23_1cc4c11cbdce950fe6629c8c4ace1e47_gandcrab

    • Size

      73KB

    • MD5

      1cc4c11cbdce950fe6629c8c4ace1e47

    • SHA1

      38730a89e6f9d69b16bed16ed4ce49a3f5594ad2

    • SHA256

      807486c691745df9703f3b8931b2505cc20bb7d8a6e24b5fbb698af1bbc1b729

    • SHA512

      5b1b039b2a590520f0b79e1a4b8fc0905a326e4bd6cc3115db5a8dc93a7224b09ee2d19fe087da5a67c925694f0631d88feca128cc663c11a8650a46afbdde8d

    • SSDEEP

      1536:r55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:XMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks