Overview

overview

10

Static

static

10

ad5fe748d5...18.exe

windows7-x64

6

ad5fe748d5...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad5fe748d5a74a9fc570c0fbe51f47ef_JaffaCakes118

  • Size

    70KB

  • Sample

    240615-jjvf9awemj

  • MD5

    ad5fe748d5a74a9fc570c0fbe51f47ef

  • SHA1

    fb2b29f20c9b922836f5c6ce338b068ca7c9bb05

  • SHA256

    a5823e6e5f0566a1e104995107ccd344dee2b0ab489bcc817093d1507eacd061

  • SHA512

    c1877f138b8668917ae01a6cea2d1fc8552ac3522dc8ef41c6e96a15eb059ee5a03c2d324b9b4ac18e1639bbf6caa03eff0ec45ae40f98416f52fe1f039ccae2

  • SSDEEP

    1536:SZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Zd5BJHMqqDL2/Ovvdr

Score
10/10
gandcrabpersistence

Malware Config

Targets

    • Target

      ad5fe748d5a74a9fc570c0fbe51f47ef_JaffaCakes118

    • Size

      70KB

    • MD5

      ad5fe748d5a74a9fc570c0fbe51f47ef

    • SHA1

      fb2b29f20c9b922836f5c6ce338b068ca7c9bb05

    • SHA256

      a5823e6e5f0566a1e104995107ccd344dee2b0ab489bcc817093d1507eacd061

    • SHA512

      c1877f138b8668917ae01a6cea2d1fc8552ac3522dc8ef41c6e96a15eb059ee5a03c2d324b9b4ac18e1639bbf6caa03eff0ec45ae40f98416f52fe1f039ccae2

    • SSDEEP

      1536:SZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:Zd5BJHMqqDL2/Ovvdr

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks