General

  • Target

    1ecde1b4671e02670b350ba0d32f5968_JaffaCakes118

  • Size

    283KB

  • Sample

    240507-ajs4racg32

  • MD5

    1ecde1b4671e02670b350ba0d32f5968

  • SHA1

    284a5ee7a53ea9f859b5b78b9b831e65f452a956

  • SHA256

    3672b1bbd1f3d380972c54324eb814cd582894cc6b22743955e70e741b5085e1

  • SHA512

    955439223608799b6e6266ed698c717eb28c445697551165578b9103335295a040154c0df5fe43142ebba792ef479db6d691f4db2d22fa0e4b1a79c57e296eed

  • SSDEEP

    6144:JfsblDwHcgKClIxJ/ZtaQjhfdtzYyD1MP:2hFvcu/faOdd1w

Malware Config

Targets

    • Target

      1ecde1b4671e02670b350ba0d32f5968_JaffaCakes118

    • Size

      283KB

    • MD5

      1ecde1b4671e02670b350ba0d32f5968

    • SHA1

      284a5ee7a53ea9f859b5b78b9b831e65f452a956

    • SHA256

      3672b1bbd1f3d380972c54324eb814cd582894cc6b22743955e70e741b5085e1

    • SHA512

      955439223608799b6e6266ed698c717eb28c445697551165578b9103335295a040154c0df5fe43142ebba792ef479db6d691f4db2d22fa0e4b1a79c57e296eed

    • SSDEEP

      6144:JfsblDwHcgKClIxJ/ZtaQjhfdtzYyD1MP:2hFvcu/faOdd1w

    • GandCrab payload

    • Gandcrab

      Gandcrab is a Trojan horse that encrypts files on a computer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks