General

  • Target

    2025-01-24_086d7bee5d9349b2561d366932ab8200_gandcrab

  • Size

    73KB

  • Sample

    250124-anz3vszqaw

  • MD5

    086d7bee5d9349b2561d366932ab8200

  • SHA1

    6a73897e90fa57e9e7e72c1911656aa476735eca

  • SHA256

    c76f054252ae876a2b7abc06a15f39259e7fe9da2a3d47dd903105e53f6c66f4

  • SHA512

    726c34a0d80e6db22f69ac41ad049a3db6bcd5b0afa160b3af01160269d28bbc89e831d302cbb482da9017373ac4a1d55a540ad62a5bdfaec1743aa250613185

  • SSDEEP

    1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-24_086d7bee5d9349b2561d366932ab8200_gandcrab

    • Size

      73KB

    • MD5

      086d7bee5d9349b2561d366932ab8200

    • SHA1

      6a73897e90fa57e9e7e72c1911656aa476735eca

    • SHA256

      c76f054252ae876a2b7abc06a15f39259e7fe9da2a3d47dd903105e53f6c66f4

    • SHA512

      726c34a0d80e6db22f69ac41ad049a3db6bcd5b0afa160b3af01160269d28bbc89e831d302cbb482da9017373ac4a1d55a540ad62a5bdfaec1743aa250613185

    • SSDEEP

      1536:755u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:HMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks