General

  • Target

    2025-01-24_17e894d5b7ea82f7db2fb640c1a2dfb9_gandcrab

  • Size

    73KB

  • Sample

    250124-f3fknatkan

  • MD5

    17e894d5b7ea82f7db2fb640c1a2dfb9

  • SHA1

    62d6af7f12cc1ad71e75d1cbd50d1a79f48e1703

  • SHA256

    89ca1eadb371aacc627c37a928541d601d2f8f4c3b09c8380916cfd25df32d1f

  • SHA512

    075a09405538c893833bbd930dbf05194a2132845f38b076c2f237222edf54545b47c3710db75489d3e5348e56e60a949a9bd55fe208f1354c73d68e25402179

  • SSDEEP

    1536:v55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:bMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-24_17e894d5b7ea82f7db2fb640c1a2dfb9_gandcrab

    • Size

      73KB

    • MD5

      17e894d5b7ea82f7db2fb640c1a2dfb9

    • SHA1

      62d6af7f12cc1ad71e75d1cbd50d1a79f48e1703

    • SHA256

      89ca1eadb371aacc627c37a928541d601d2f8f4c3b09c8380916cfd25df32d1f

    • SHA512

      075a09405538c893833bbd930dbf05194a2132845f38b076c2f237222edf54545b47c3710db75489d3e5348e56e60a949a9bd55fe208f1354c73d68e25402179

    • SSDEEP

      1536:v55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:bMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks