General

  • Target

    2025-01-28_30ccef6c3ba8ad16c834995bfcc210b0_gandcrab

  • Size

    73KB

  • Sample

    250128-plbpta1pbm

  • MD5

    30ccef6c3ba8ad16c834995bfcc210b0

  • SHA1

    46184b72d723c232f71fcc03cbb4d52b1fa27b23

  • SHA256

    13ca48a6dd42a5c7dd5292018af598e888baeb6689b8a971655b1ffa85ee90c5

  • SHA512

    7624d7f624d148969103f92a8137910e72fabc0d162e364712f18ddcf49b3014c5790d96011a8f464a3e90c6ad6f45355a64cfaec086e74bc7228b3498a3d169

  • SSDEEP

    1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-28_30ccef6c3ba8ad16c834995bfcc210b0_gandcrab

    • Size

      73KB

    • MD5

      30ccef6c3ba8ad16c834995bfcc210b0

    • SHA1

      46184b72d723c232f71fcc03cbb4d52b1fa27b23

    • SHA256

      13ca48a6dd42a5c7dd5292018af598e888baeb6689b8a971655b1ffa85ee90c5

    • SHA512

      7624d7f624d148969103f92a8137910e72fabc0d162e364712f18ddcf49b3014c5790d96011a8f464a3e90c6ad6f45355a64cfaec086e74bc7228b3498a3d169

    • SSDEEP

      1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks