General

  • Target

    2025-01-24_205ad51a233c975f9a682ad79fba7c05_gandcrab

  • Size

    73KB

  • Sample

    250124-t1ataaynbr

  • MD5

    205ad51a233c975f9a682ad79fba7c05

  • SHA1

    f325b0ef83d6b739994393d6d386942c5fa589d0

  • SHA256

    924e4920fe2301c7970e08de603256ba9346d7ef0e68c695124f1db40e9e01e3

  • SHA512

    7bbf7e28020db7a11c96eb5602e5a34ef2e46b6d9e77074db3476d89f44a4cf91c0443994bea8ae485eec2a7a0d2580d6c87952aba7656f3530b8f501089cb7b

  • SSDEEP

    1536:m55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:MMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-24_205ad51a233c975f9a682ad79fba7c05_gandcrab

    • Size

      73KB

    • MD5

      205ad51a233c975f9a682ad79fba7c05

    • SHA1

      f325b0ef83d6b739994393d6d386942c5fa589d0

    • SHA256

      924e4920fe2301c7970e08de603256ba9346d7ef0e68c695124f1db40e9e01e3

    • SHA512

      7bbf7e28020db7a11c96eb5602e5a34ef2e46b6d9e77074db3476d89f44a4cf91c0443994bea8ae485eec2a7a0d2580d6c87952aba7656f3530b8f501089cb7b

    • SSDEEP

      1536:m55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:MMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks