General

  • Target

    2025-01-27_2b2ce4c05feb279e9b569d918aa4112e_gandcrab

  • Size

    73KB

  • Sample

    250127-tvpp9axjex

  • MD5

    2b2ce4c05feb279e9b569d918aa4112e

  • SHA1

    ee3cc55c9c5c45959cd032cc3a68e072d8e6d8f4

  • SHA256

    be26ebe639f2e5daed43cedd82e31727395cbb9e283ae9c9c9ba7abdf19d40ad

  • SHA512

    016cb2ff84e58827a3887a41d4d862552cb7e7b217a7732ababa68be277e7483c54141af284f9b00b2575c6c079e6a5efda4b927d8d345966bd03637f4ce3df7

  • SSDEEP

    1536:h55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:JMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-27_2b2ce4c05feb279e9b569d918aa4112e_gandcrab

    • Size

      73KB

    • MD5

      2b2ce4c05feb279e9b569d918aa4112e

    • SHA1

      ee3cc55c9c5c45959cd032cc3a68e072d8e6d8f4

    • SHA256

      be26ebe639f2e5daed43cedd82e31727395cbb9e283ae9c9c9ba7abdf19d40ad

    • SHA512

      016cb2ff84e58827a3887a41d4d862552cb7e7b217a7732ababa68be277e7483c54141af284f9b00b2575c6c079e6a5efda4b927d8d345966bd03637f4ce3df7

    • SSDEEP

      1536:h55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:JMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks