General

  • Target

    2025-04-11_61a9e1d87ea03b5f30f2322a0bc63eff_elex_gandcrab_rhadamanthys

  • Size

    80KB

  • Sample

    250411-f73kzs1kw7

  • MD5

    61a9e1d87ea03b5f30f2322a0bc63eff

  • SHA1

    8101690059f2d87ef8634f5eee36bb8a0e96f72e

  • SHA256

    081179f9a6e5ccb77adc0c6af83aa2cba84353123b18577f173586daded156bc

  • SHA512

    e330a8ae0109b96b7f52c73756364bf8a2d8240c9d66c55972f5bcd980e4555286a29fbc75902c85a0c6636f1dbb8853f3e657faaf18d37b0e1abf779bc28d37

  • SSDEEP

    1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rl:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-04-11_61a9e1d87ea03b5f30f2322a0bc63eff_elex_gandcrab_rhadamanthys

    • Size

      80KB

    • MD5

      61a9e1d87ea03b5f30f2322a0bc63eff

    • SHA1

      8101690059f2d87ef8634f5eee36bb8a0e96f72e

    • SHA256

      081179f9a6e5ccb77adc0c6af83aa2cba84353123b18577f173586daded156bc

    • SHA512

      e330a8ae0109b96b7f52c73756364bf8a2d8240c9d66c55972f5bcd980e4555286a29fbc75902c85a0c6636f1dbb8853f3e657faaf18d37b0e1abf779bc28d37

    • SSDEEP

      1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rl:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks