Overview

overview

7

Static

static

3

ed63c9f9c5...18.exe

windows7-x64

7

ed63c9f9c5...18.exe

windows10-2004-x64

7

$PLUGINSDIR/bvc.dll

windows7-x64

3

$PLUGINSDIR/bvc.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed63c9f9c5726b25ef5611c5f0ad4147_JaffaCakes118

  • Size

    580KB

  • Sample

    240411-pbry2sed4s

  • MD5

    ed63c9f9c5726b25ef5611c5f0ad4147

  • SHA1

    6e80496d9b34718cc1b0e39852a897526239bcb8

  • SHA256

    133cc965d6b60475f0d9d92a122738460b04ddb2555fffe6db1d86039e1932a3

  • SHA512

    992fdc11e12645db352cbf2f082aceb2739ab6a06869896607b99296dd33be28fd8da84f890ea8ddb10959c25b1afeeaaf6fab5124288461ae83b74efaccb051

  • SSDEEP

    12288:vK0KzKqnSRd4RuqJIbCUxOs4OIHTe7kZ6q9r1NpaMDBN0W:vK0UxSRdzqmbC2OLKkZx9r1XaMDBx

Score
7/10

Malware Config

Targets

    • Target

      ed63c9f9c5726b25ef5611c5f0ad4147_JaffaCakes118

    • Size

      580KB

    • MD5

      ed63c9f9c5726b25ef5611c5f0ad4147

    • SHA1

      6e80496d9b34718cc1b0e39852a897526239bcb8

    • SHA256

      133cc965d6b60475f0d9d92a122738460b04ddb2555fffe6db1d86039e1932a3

    • SHA512

      992fdc11e12645db352cbf2f082aceb2739ab6a06869896607b99296dd33be28fd8da84f890ea8ddb10959c25b1afeeaaf6fab5124288461ae83b74efaccb051

    • SSDEEP

      12288:vK0KzKqnSRd4RuqJIbCUxOs4OIHTe7kZ6q9r1NpaMDBN0W:vK0UxSRdzqmbC2OLKkZx9r1XaMDBx

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/bvc.dll

    • Size

      117KB

    • MD5

      eb6c8f26fd18387ce3ae7e2e87ff367d

    • SHA1

      cd2d70b318d3b26991272c34f7b40bf888db3f98

    • SHA256

      b3238feac8627b3c3d167885a4e2d048d9922e1758595f1e3e5dd12f40fc6720

    • SHA512

      1b03d5febd435c73b23d9d04e937025d19d4dcbc7e5af649fe55538879737fb89b31e12e95787178d66ae8d3cee128a9735cc91b23d6bf114dcaae4ea9e46bab

    • SSDEEP

      1536:Mqxcp/abBdX1rW542MDQp1vO/pCRA/vHTSZsihiIonUBpdFm5fRfzh:/xclabBFo5h1v4OO01hiIZpjm5fR

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks