General

  • Target

    2025-01-23_23149b96fecddafa93ef437f136c2d0d_gandcrab

  • Size

    73KB

  • Sample

    250123-stzcmavqfr

  • MD5

    23149b96fecddafa93ef437f136c2d0d

  • SHA1

    94b784d3f6e063dd63bfa519c1c2bd7c041b7a10

  • SHA256

    78f3453a980f1d98d29f12b0b2ea4e013a66f85d0f66bd346168348ce2641911

  • SHA512

    7fe03bcb088e691a34ce6555dc5da96aeca30894b0786c738e3e14e271f26affa1b35bb03095748eaffcd84c034416f80fe79228b2402c0c35299c12de9698c9

  • SSDEEP

    1536:B55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:pMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-23_23149b96fecddafa93ef437f136c2d0d_gandcrab

    • Size

      73KB

    • MD5

      23149b96fecddafa93ef437f136c2d0d

    • SHA1

      94b784d3f6e063dd63bfa519c1c2bd7c041b7a10

    • SHA256

      78f3453a980f1d98d29f12b0b2ea4e013a66f85d0f66bd346168348ce2641911

    • SHA512

      7fe03bcb088e691a34ce6555dc5da96aeca30894b0786c738e3e14e271f26affa1b35bb03095748eaffcd84c034416f80fe79228b2402c0c35299c12de9698c9

    • SSDEEP

      1536:B55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:pMSjOnrmBTMqqDL2/mr3IdE8we0Avu5F

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks