General

  • Target

    2025-04-11_2d28867d41ed1b391c96b2758dcf3909_elex_gandcrab_rhadamanthys

  • Size

    80KB

  • Sample

    250411-f5qtea1jz2

  • MD5

    2d28867d41ed1b391c96b2758dcf3909

  • SHA1

    4652d838cc02f7f9114d9da16205ef49a8effe18

  • SHA256

    02f0b07cc704fb8c7136e7385609daf86f7c3672bc405a5b5964d72497075ee0

  • SHA512

    67069117348078b2ae608286f83b84e691196c4c728d894bca5f74f8d17966cf7ea6551765d0308f5f5501821dd198961176236635a8dcb9beb45addac80864b

  • SSDEEP

    1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rt:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5R

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-04-11_2d28867d41ed1b391c96b2758dcf3909_elex_gandcrab_rhadamanthys

    • Size

      80KB

    • MD5

      2d28867d41ed1b391c96b2758dcf3909

    • SHA1

      4652d838cc02f7f9114d9da16205ef49a8effe18

    • SHA256

      02f0b07cc704fb8c7136e7385609daf86f7c3672bc405a5b5964d72497075ee0

    • SHA512

      67069117348078b2ae608286f83b84e691196c4c728d894bca5f74f8d17966cf7ea6551765d0308f5f5501821dd198961176236635a8dcb9beb45addac80864b

    • SSDEEP

      1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rt:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5R

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks