General
-
Target
371de1cf9d7da962f423a3ff1ad9bc52_JaffaCakes118
-
Size
244KB
-
Sample
240330-jkrrrabb9y
-
MD5
371de1cf9d7da962f423a3ff1ad9bc52
-
SHA1
c913750e9fb78cd6687555e9f64d60c5ebf16aaa
-
SHA256
2b94a1ef590b4d82ae9cff8d771a738dfe672e8efa24b696ef686da1ea78501e
-
SHA512
98d3b6a1844f14307f1f2b52b82b6cb432035bee74ebdf04b77161dfe191439f010d324c62e09d7bbbe48c89a0fbbce0c00b61f2a1185dec7ffbfd82ef16758f
-
SSDEEP
3072:JyQC2mC/zuw10GGQ++vroMTPjg/2Y2KfdkYq4vjC3IxbOaeOuMkBAOE6lLxSPNlm:uKuwvJUdkqjtbwqkmOVlLxSG
Static task
static1
Behavioral task
behavioral1
Sample
371de1cf9d7da962f423a3ff1ad9bc52_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
371de1cf9d7da962f423a3ff1ad9bc52_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
371de1cf9d7da962f423a3ff1ad9bc52_JaffaCakes118
-
Size
244KB
-
MD5
371de1cf9d7da962f423a3ff1ad9bc52
-
SHA1
c913750e9fb78cd6687555e9f64d60c5ebf16aaa
-
SHA256
2b94a1ef590b4d82ae9cff8d771a738dfe672e8efa24b696ef686da1ea78501e
-
SHA512
98d3b6a1844f14307f1f2b52b82b6cb432035bee74ebdf04b77161dfe191439f010d324c62e09d7bbbe48c89a0fbbce0c00b61f2a1185dec7ffbfd82ef16758f
-
SSDEEP
3072:JyQC2mC/zuw10GGQ++vroMTPjg/2Y2KfdkYq4vjC3IxbOaeOuMkBAOE6lLxSPNlm:uKuwvJUdkqjtbwqkmOVlLxSG
Score10/10-
GandCrab payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-