Overview

overview

10

Static

static

10

baabb54b83...18.exe

windows7-x64

6

baabb54b83...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    baabb54b83680ce2ac25d550b140e61c_JaffaCakes118

  • Size

    69KB

  • Sample

    240618-j384rayenl

  • MD5

    baabb54b83680ce2ac25d550b140e61c

  • SHA1

    0dcace583cd0965c509b70a3b4255126c1a0826d

  • SHA256

    ced1b6505a46873f3b9224b621b0b17cf16f4507784013983835171ad1abe241

  • SHA512

    0939231e192748a60c4f6bee1b31ef75a3e5529f84e08a8186f1d7e03190a066490d12b0ce7ecea5ba9e6f4e543eacd9a8e2de5cecfe977557a13ba5f5a154d5

  • SSDEEP

    1536:1ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd9:JBounVyFHpfMqqDL2/Lkvd

Score
10/10
gandcrabpersistence

Malware Config

Targets

    • Target

      baabb54b83680ce2ac25d550b140e61c_JaffaCakes118

    • Size

      69KB

    • MD5

      baabb54b83680ce2ac25d550b140e61c

    • SHA1

      0dcace583cd0965c509b70a3b4255126c1a0826d

    • SHA256

      ced1b6505a46873f3b9224b621b0b17cf16f4507784013983835171ad1abe241

    • SHA512

      0939231e192748a60c4f6bee1b31ef75a3e5529f84e08a8186f1d7e03190a066490d12b0ce7ecea5ba9e6f4e543eacd9a8e2de5cecfe977557a13ba5f5a154d5

    • SSDEEP

      1536:1ZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAwfMqqU+2bbbAV2/S2Lkvd9:JBounVyFHpfMqqDL2/Lkvd

    Score
    6/10
    persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks