General

  • Target

    2025-04-11_0ae29caec201f6efb52bc6e7b7890456_elex_gandcrab_rhadamanthys

  • Size

    80KB

  • Sample

    250411-f4gjcazzds

  • MD5

    0ae29caec201f6efb52bc6e7b7890456

  • SHA1

    d44d50d6d746444155a7a96686d435def7cf7b0d

  • SHA256

    65c21cb1328767183aa537ea4aa30083b31b799ac117d622658561c524d6aabe

  • SHA512

    a9fefb4927f487fd9471ee154eb24b3b0eb1cd41b64e59e14cc31fa7186e9c677fbeeda3e4bca50740bb4647f10e52f375a549dd0d1e09c1320300ce8b92025b

  • SSDEEP

    1536:w55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rM:CMSjOnrmBTMqqDL2/mr3IdE8we0Avu5w

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-04-11_0ae29caec201f6efb52bc6e7b7890456_elex_gandcrab_rhadamanthys

    • Size

      80KB

    • MD5

      0ae29caec201f6efb52bc6e7b7890456

    • SHA1

      d44d50d6d746444155a7a96686d435def7cf7b0d

    • SHA256

      65c21cb1328767183aa537ea4aa30083b31b799ac117d622658561c524d6aabe

    • SHA512

      a9fefb4927f487fd9471ee154eb24b3b0eb1cd41b64e59e14cc31fa7186e9c677fbeeda3e4bca50740bb4647f10e52f375a549dd0d1e09c1320300ce8b92025b

    • SSDEEP

      1536:w55u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rM:CMSjOnrmBTMqqDL2/mr3IdE8we0Avu5w

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks