General

  • Target

    2025-05-18_a574d4f68bb9a119dfb9428182880ba2_elex_gandcrab

  • Size

    70KB

  • Sample

    250518-vreasahq9z

  • MD5

    a574d4f68bb9a119dfb9428182880ba2

  • SHA1

    2769379c7941074499f5aeb2f1c4929d575ce8c9

  • SHA256

    c2539226eb75466efebc292ab0683aaf2c02c854efcedc7a3fccadae11fa82f3

  • SHA512

    643757c18770c4ae776c79df24d341f418b9a2f2334f674f24f36a5a62b928f0a4d1a0bfefdafbfafbd31be25ffd0c61a5e103d8791ed9f2b3a79162effd8e22

  • SSDEEP

    1536:BZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:od5BJHMqqDL2/Ovvdr

Malware Config

Targets

    • Target

      2025-05-18_a574d4f68bb9a119dfb9428182880ba2_elex_gandcrab

    • Size

      70KB

    • MD5

      a574d4f68bb9a119dfb9428182880ba2

    • SHA1

      2769379c7941074499f5aeb2f1c4929d575ce8c9

    • SHA256

      c2539226eb75466efebc292ab0683aaf2c02c854efcedc7a3fccadae11fa82f3

    • SHA512

      643757c18770c4ae776c79df24d341f418b9a2f2334f674f24f36a5a62b928f0a4d1a0bfefdafbfafbd31be25ffd0c61a5e103d8791ed9f2b3a79162effd8e22

    • SSDEEP

      1536:BZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:od5BJHMqqDL2/Ovvdr

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

    • Gandcrab family

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks