General

  • Target

    2025-01-27_2dbbb722df26ffc34bd89e46a037b1b3_gandcrab

  • Size

    73KB

  • Sample

    250127-vztqfazmem

  • MD5

    2dbbb722df26ffc34bd89e46a037b1b3

  • SHA1

    fb791285544ffbec56992a684e451558eaf5ecff

  • SHA256

    6126a38cfa2485052f3a8cb05c6b17ee1b2ea01236703e25c0abc7589b9e9124

  • SHA512

    4eb00ef841df3f629230ee9e50a530cddfd01a6b4280f1c15ea41f8eb38196b53b412fa492ce987bdd575200e0982970837b26cb59c961a9c91fb8262c7ab5f7

  • SSDEEP

    1536:t555555555555pmgSeGDjtQhnwmmB0yWMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r+:KMSjOnrmBuMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-27_2dbbb722df26ffc34bd89e46a037b1b3_gandcrab

    • Size

      73KB

    • MD5

      2dbbb722df26ffc34bd89e46a037b1b3

    • SHA1

      fb791285544ffbec56992a684e451558eaf5ecff

    • SHA256

      6126a38cfa2485052f3a8cb05c6b17ee1b2ea01236703e25c0abc7589b9e9124

    • SHA512

      4eb00ef841df3f629230ee9e50a530cddfd01a6b4280f1c15ea41f8eb38196b53b412fa492ce987bdd575200e0982970837b26cb59c961a9c91fb8262c7ab5f7

    • SSDEEP

      1536:t555555555555pmgSeGDjtQhnwmmB0yWMqqU+2bbbAV2/S2mr3IdE8mne0Avu5r+:KMSjOnrmBuMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks