Overview

overview

10

Static

static

10

ab2ade2765...18.exe

windows7-x64

6

ab2ade2765...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab2ade27659ec2a5ae9061c47bf4c4fb_JaffaCakes118

  • Size

    70KB

  • Sample

    240614-yjbfpsxbpq

  • MD5

    ab2ade27659ec2a5ae9061c47bf4c4fb

  • SHA1

    7d55c2b6d8374113926c27708bc7766c9b7e4dd6

  • SHA256

    ecffab4f2c602dc448fc660d951c597bece58b709d98ee6ff03c3010473ffeee

  • SHA512

    e09e8af5224d2b6193676398e9442f55945adfbdeb294b78056b5ec9938b3fdf0af9af0f42892e25a04a0c2dcf5644f2ff972470ca27510a23f020bf8b00da1c

  • SSDEEP

    1536:IZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Hd5BJHMqqDL2/Ovvdr

Score
10/10
gandcrabpersistence

Malware Config

Targets

    • Target

      ab2ade27659ec2a5ae9061c47bf4c4fb_JaffaCakes118

    • Size

      70KB

    • MD5

      ab2ade27659ec2a5ae9061c47bf4c4fb

    • SHA1

      7d55c2b6d8374113926c27708bc7766c9b7e4dd6

    • SHA256

      ecffab4f2c602dc448fc660d951c597bece58b709d98ee6ff03c3010473ffeee

    • SHA512

      e09e8af5224d2b6193676398e9442f55945adfbdeb294b78056b5ec9938b3fdf0af9af0f42892e25a04a0c2dcf5644f2ff972470ca27510a23f020bf8b00da1c

    • SSDEEP

      1536:IZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Hd5BJHMqqDL2/Ovvdr

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks