General

  • Target

    2025-03-26_da5ac9f503f9e86ce6a37ddeb23b3792_gandcrab_rhadamanthys

  • Size

    73KB

  • Sample

    250326-h98wwsyzht

  • MD5

    da5ac9f503f9e86ce6a37ddeb23b3792

  • SHA1

    95120365a5e7e2c800300381514f2c0b7dde0143

  • SHA256

    1abfe369c44feb035dc025131cf302ebed43121280dc3eae02eb9c83c4ded1fa

  • SHA512

    62e314b139ef9a51a8566945745f2b239d80063cfcf494bf2d66d8736bd40f267b9eb44f7eff2a4020721a7f07b269e0f50edf985749cd2325e7ca30bf0babac

  • SSDEEP

    1536:G55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:sMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-03-26_da5ac9f503f9e86ce6a37ddeb23b3792_gandcrab_rhadamanthys

    • Size

      73KB

    • MD5

      da5ac9f503f9e86ce6a37ddeb23b3792

    • SHA1

      95120365a5e7e2c800300381514f2c0b7dde0143

    • SHA256

      1abfe369c44feb035dc025131cf302ebed43121280dc3eae02eb9c83c4ded1fa

    • SHA512

      62e314b139ef9a51a8566945745f2b239d80063cfcf494bf2d66d8736bd40f267b9eb44f7eff2a4020721a7f07b269e0f50edf985749cd2325e7ca30bf0babac

    • SSDEEP

      1536:G55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:sMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks