General

  • Target

    2025-01-24_23ec29a3485aa1fbdbf7593d33fcd09d_gandcrab

  • Size

    73KB

  • Sample

    250124-twxr9aylgl

  • MD5

    23ec29a3485aa1fbdbf7593d33fcd09d

  • SHA1

    95965f7d232217bde407b8647d4401a61efa3a1f

  • SHA256

    fe4e37445f4d7af37733ca5ac6c3d7136b1e754eb894c6006fdb62853f2d6b3a

  • SHA512

    c3c82fea3efddd5905e63369fcb67957886d0dd4550f49fec25172217ca135232657c3c46b85494c7aaf30597ce511da68090df1ebe95e36bf057cf47b32920c

  • SSDEEP

    1536:i55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:YMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-24_23ec29a3485aa1fbdbf7593d33fcd09d_gandcrab

    • Size

      73KB

    • MD5

      23ec29a3485aa1fbdbf7593d33fcd09d

    • SHA1

      95965f7d232217bde407b8647d4401a61efa3a1f

    • SHA256

      fe4e37445f4d7af37733ca5ac6c3d7136b1e754eb894c6006fdb62853f2d6b3a

    • SHA512

      c3c82fea3efddd5905e63369fcb67957886d0dd4550f49fec25172217ca135232657c3c46b85494c7aaf30597ce511da68090df1ebe95e36bf057cf47b32920c

    • SSDEEP

      1536:i55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:YMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks