General

  • Target

    2025-04-11_85b438224f29c004b88dc297bac3c84f_elex_gandcrab_rhadamanthys

  • Size

    80KB

  • Sample

    250411-fk9e1szps5

  • MD5

    85b438224f29c004b88dc297bac3c84f

  • SHA1

    37f72b8a8fe526f4b5cc98366d0d58c6a329175b

  • SHA256

    2bb961cb5efbd1cfbbf098955a584daad48db4418fd48f1eeb80bac8e0e1a4d9

  • SHA512

    ed980379001d2a313c0b96445d51b9dda954dfa5d4127d1cf1fa323eab547573140f79cab59967d42d20657bcfdc8a3f5274f6df4eca6c6264d690b6d525b12f

  • SSDEEP

    1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rb:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5X

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      2025-04-11_85b438224f29c004b88dc297bac3c84f_elex_gandcrab_rhadamanthys

    • Size

      80KB

    • MD5

      85b438224f29c004b88dc297bac3c84f

    • SHA1

      37f72b8a8fe526f4b5cc98366d0d58c6a329175b

    • SHA256

      2bb961cb5efbd1cfbbf098955a584daad48db4418fd48f1eeb80bac8e0e1a4d9

    • SHA512

      ed980379001d2a313c0b96445d51b9dda954dfa5d4127d1cf1fa323eab547573140f79cab59967d42d20657bcfdc8a3f5274f6df4eca6c6264d690b6d525b12f

    • SSDEEP

      1536:555u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rb:RMSjOnrmBTMqqDL2/mr3IdE8we0Avu5X

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks