General

  • Target

    7e8205cf0878cc740f36202ff226551f_JaffaCakes118

  • Size

    73KB

  • Sample

    240528-1myrhsdf3v

  • MD5

    7e8205cf0878cc740f36202ff226551f

  • SHA1

    372befaa022d26d7fdce6b7b72f8605f261001f5

  • SHA256

    6129127c620892f4a0a0958d20c8faa0e6f7490f942a28a3423d857a6c7abd5e

  • SHA512

    3f5ebfe9a3c487a4d74edf65accc3e3f31d132f4f08feed19e17fbd0cb49993d53fd975b6f2db1657c0ccb7130cb442d75c4bfb12741881ddaf5ff7637f5c491

  • SSDEEP

    1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

Score
10/10

Malware Config

Extracted

Family

gandcrab

C2

http://gdcbghvjyqy7jclk.onion.top/

Targets

    • Target

      7e8205cf0878cc740f36202ff226551f_JaffaCakes118

    • Size

      73KB

    • MD5

      7e8205cf0878cc740f36202ff226551f

    • SHA1

      372befaa022d26d7fdce6b7b72f8605f261001f5

    • SHA256

      6129127c620892f4a0a0958d20c8faa0e6f7490f942a28a3423d857a6c7abd5e

    • SHA512

      3f5ebfe9a3c487a4d74edf65accc3e3f31d132f4f08feed19e17fbd0cb49993d53fd975b6f2db1657c0ccb7130cb442d75c4bfb12741881ddaf5ff7637f5c491

    • SSDEEP

      1536:455u555555555pmgSeGDjtQhnwmmB0ybMqqU+2bbbAV2/S2mr3IdE8mne0Avu5rJ:aMSjOnrmBTMqqDL2/mr3IdE8we0Avu5h

    Score
    6/10
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Tasks