General
-
Target
JaffaCakes118_1304b25aa2e3a812b3b48959a2acc99d
-
Size
320KB
-
Sample
250106-g1mfvsykft
-
MD5
1304b25aa2e3a812b3b48959a2acc99d
-
SHA1
a7db777d60ae5cbfe46ca6a47cf079cbe0e8cd5d
-
SHA256
ce39c4b3162cfe0fc8560950919c6111693dd6ad2ad1929b769428de170302d4
-
SHA512
b872691b9611d386f715ace7cf0f456c4a14c3488f1a7b379daddb257a673929eedc50e1892f328f8f8027278a6199d80710a5ca995dcf3126c8f2243271e5c2
-
SSDEEP
6144:r2UlDdlPnxirO0o9NAO/tLcZOk3GBz6omgTBUcuxcp2:rlDdhg7KBk3wmomgtCcp2
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_1304b25aa2e3a812b3b48959a2acc99d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_1304b25aa2e3a812b3b48959a2acc99d.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_1304b25aa2e3a812b3b48959a2acc99d
-
Size
320KB
-
MD5
1304b25aa2e3a812b3b48959a2acc99d
-
SHA1
a7db777d60ae5cbfe46ca6a47cf079cbe0e8cd5d
-
SHA256
ce39c4b3162cfe0fc8560950919c6111693dd6ad2ad1929b769428de170302d4
-
SHA512
b872691b9611d386f715ace7cf0f456c4a14c3488f1a7b379daddb257a673929eedc50e1892f328f8f8027278a6199d80710a5ca995dcf3126c8f2243271e5c2
-
SSDEEP
6144:r2UlDdlPnxirO0o9NAO/tLcZOk3GBz6omgTBUcuxcp2:rlDdhg7KBk3wmomgtCcp2
Score10/10-
GandCrab payload
-
Gandcrab family
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-