General

  • Target

    2025-01-23_22389d84d0ebbe1ae61b37d7748f444c_gandcrab

  • Size

    73KB

  • Sample

    250123-nlkgaaykfw

  • MD5

    22389d84d0ebbe1ae61b37d7748f444c

  • SHA1

    c00fb9da6ad36b0b0d38622cfb8169876c568572

  • SHA256

    5d35b14924c8e8c232342b08bb6952455217c1141cb97eb046f5a9d705a6f271

  • SHA512

    0152514ef08cf4e81ed5b2d9674f613a12915adb5cb7accc768a06004c4134e84087d161afda7ade032895338ac5e078c8eca84e38a315b71176506410f482fb

  • SSDEEP

    1536:B555555555555pmgSeGDjtQhnwmmB0yXgMqqU+2bbbAV2/S2mr3IdE8mne0Avu5V:uMSjOnrmBoMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-23_22389d84d0ebbe1ae61b37d7748f444c_gandcrab

    • Size

      73KB

    • MD5

      22389d84d0ebbe1ae61b37d7748f444c

    • SHA1

      c00fb9da6ad36b0b0d38622cfb8169876c568572

    • SHA256

      5d35b14924c8e8c232342b08bb6952455217c1141cb97eb046f5a9d705a6f271

    • SHA512

      0152514ef08cf4e81ed5b2d9674f613a12915adb5cb7accc768a06004c4134e84087d161afda7ade032895338ac5e078c8eca84e38a315b71176506410f482fb

    • SSDEEP

      1536:B555555555555pmgSeGDjtQhnwmmB0yXgMqqU+2bbbAV2/S2mr3IdE8mne0Avu5V:uMSjOnrmBoMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks