Overview

overview

10

Static

static

10

e0cdb6c682...18.exe

windows7-x64

6

e0cdb6c682...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0cdb6c68296002fc982e6634812a4c1_JaffaCakes118

  • Size

    70KB

  • Sample

    240914-xd722szakm

  • MD5

    e0cdb6c68296002fc982e6634812a4c1

  • SHA1

    36a3105134c558a91e10380321deff4a2324e89b

  • SHA256

    129604be82cd7adc0751d71f0fb7ff6e33ae281e3c50426df2373d3d90882dab

  • SHA512

    8d534c88ddf091edc8b268b5fd2bef52113772ca7bab768ab5171e643d306530178c669d32fad9cd90fea63ed6ecbb6ee69376552de6e71a0f8b6fcccce2eba1

  • SSDEEP

    1536:+ZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:dd5BJHMqqDL2/Ovvdr

Score
10/10
gandcrabdiscoverypersistence

Malware Config

Targets

    • Target

      e0cdb6c68296002fc982e6634812a4c1_JaffaCakes118

    • Size

      70KB

    • MD5

      e0cdb6c68296002fc982e6634812a4c1

    • SHA1

      36a3105134c558a91e10380321deff4a2324e89b

    • SHA256

      129604be82cd7adc0751d71f0fb7ff6e33ae281e3c50426df2373d3d90882dab

    • SHA512

      8d534c88ddf091edc8b268b5fd2bef52113772ca7bab768ab5171e643d306530178c669d32fad9cd90fea63ed6ecbb6ee69376552de6e71a0f8b6fcccce2eba1

    • SSDEEP

      1536:+ZZZZZZZZZZZZpXzzzzzzzzzzzzADypczUk+lkZJngWMqqU+2bbbAV2/S2OvvdZl:dd5BJHMqqDL2/Ovvdr

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks