General

  • Target

    2025-04-10_09fcad05d11360873ce692c2a2032ab9_elex_gandcrab_rhadamanthys

  • Size

    80KB

  • Sample

    250410-e3ta3s1wdy

  • MD5

    09fcad05d11360873ce692c2a2032ab9

  • SHA1

    6ff815c1e73741e23451737c7c2312908705c0e1

  • SHA256

    0330b536ee38a30133f32e03e800c676a3111d5e52881ff9ff006541e933d648

  • SHA512

    0709399e53941ec24b57bb27321013d8d0134d26c503d42ba2e6b779d288f28960a2ea212c2c2c12a21ece2691bfe812415df3fb8315ce33729eeb45510d9def

  • SSDEEP

    1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rr:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5H

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-04-10_09fcad05d11360873ce692c2a2032ab9_elex_gandcrab_rhadamanthys

    • Size

      80KB

    • MD5

      09fcad05d11360873ce692c2a2032ab9

    • SHA1

      6ff815c1e73741e23451737c7c2312908705c0e1

    • SHA256

      0330b536ee38a30133f32e03e800c676a3111d5e52881ff9ff006541e933d648

    • SHA512

      0709399e53941ec24b57bb27321013d8d0134d26c503d42ba2e6b779d288f28960a2ea212c2c2c12a21ece2691bfe812415df3fb8315ce33729eeb45510d9def

    • SSDEEP

      1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rr:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5H

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks