Overview

overview

10

Static

static

10

b77be676da...18.exe

windows7-x64

6

b77be676da...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b77be676da20b61e4bfab61028165734_JaffaCakes118

  • Size

    70KB

  • Sample

    240617-jpvn7s1crh

  • MD5

    b77be676da20b61e4bfab61028165734

  • SHA1

    3d29b863d431dfcfb1a300a65beda5a2e6f5b6c8

  • SHA256

    0082508e75c453d1584c0e90ab1a9ace0fc9b3e3a42a4cf7913f15ea64c36244

  • SHA512

    8e9f49de0a0bcf8510340192e46d4f0fd4b017ea85f45d8d08781b5bacf13b283a6f6e1d25d625c6929cf5aee5afcf362a6a9dc6fe9f9261d29a068eb98a8a7d

  • SSDEEP

    1536:eZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:9d5BJHMqqDL2/Ovvdr

Score
10/10
gandcrabpersistence

Malware Config

Targets

    • Target

      b77be676da20b61e4bfab61028165734_JaffaCakes118

    • Size

      70KB

    • MD5

      b77be676da20b61e4bfab61028165734

    • SHA1

      3d29b863d431dfcfb1a300a65beda5a2e6f5b6c8

    • SHA256

      0082508e75c453d1584c0e90ab1a9ace0fc9b3e3a42a4cf7913f15ea64c36244

    • SHA512

      8e9f49de0a0bcf8510340192e46d4f0fd4b017ea85f45d8d08781b5bacf13b283a6f6e1d25d625c6929cf5aee5afcf362a6a9dc6fe9f9261d29a068eb98a8a7d

    • SSDEEP

      1536:eZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:9d5BJHMqqDL2/Ovvdr

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks