General

  • Target

    2025-01-28_326b27353dd8eb64ffb99ae47cfc631c_gandcrab

  • Size

    73KB

  • Sample

    250128-staz2asqds

  • MD5

    326b27353dd8eb64ffb99ae47cfc631c

  • SHA1

    80b4967882594e2cacbebe16f2c4d78635ee526d

  • SHA256

    36b10eb2d301525175e17b8dbbdce21aac2d45bafe07fa6d32eb8af98fb158cc

  • SHA512

    4ca28f88d1afeeec90268a4e1aed164751a7296baf47229613f46f13aeaa5e002c5efceda4272a5fd5e7cd4f9dcc305129147058602bd5228113925ac137c91f

  • SSDEEP

    1536:D555555555555pmgSeGDjtQhnwmmB0y6MqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:kMSjOnrmBSMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-01-28_326b27353dd8eb64ffb99ae47cfc631c_gandcrab

    • Size

      73KB

    • MD5

      326b27353dd8eb64ffb99ae47cfc631c

    • SHA1

      80b4967882594e2cacbebe16f2c4d78635ee526d

    • SHA256

      36b10eb2d301525175e17b8dbbdce21aac2d45bafe07fa6d32eb8af98fb158cc

    • SHA512

      4ca28f88d1afeeec90268a4e1aed164751a7296baf47229613f46f13aeaa5e002c5efceda4272a5fd5e7cd4f9dcc305129147058602bd5228113925ac137c91f

    • SSDEEP

      1536:D555555555555pmgSeGDjtQhnwmmB0y6MqqU+2bbbAV2/S2mr3IdE8mne0Avu5ry:kMSjOnrmBSMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks