Overview

overview

7

Static

static

3

fb2e9f7cf7...18.exe

windows10-2004-x64

7

b0x3r.pyc

windows10-2004-x64

3

Resubmissions

19-04-2024 21:46

240419-1m4b1ahb8s 7

19-04-2024 21:16

240419-z4vwhsge6t 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb2e9f7cf73d9b2dd763e66392203d33_JaffaCakes118

  • Size

    10.8MB

  • Sample

    240419-1m4b1ahb8s

  • MD5

    fb2e9f7cf73d9b2dd763e66392203d33

  • SHA1

    5937a54b98ea9ade7e72d0cad3ce76fefb4f75b9

  • SHA256

    4b0d363ddceeaa55a4fd574915f4cbf4978d38f1cc99de6aa50d10e5c525148f

  • SHA512

    4d19d43b9e88d8b3971bf51fc0a0a3432af7640825389899beaec13f849cb928a44ef1f86363cb2081cd0203365dcdd6b9338ea82b333a49de6fc9b485ba1350

  • SSDEEP

    196608:iH2LiuIoP1HSsimvlG2etbYPvbJQlHJCO8ZD8CPFbYDSjAOxNcKu:LzP1pimtokJQlp8Z9kO5xuK

Score
7/10
pyinstaller

Malware Config

Targets

    • Target

      fb2e9f7cf73d9b2dd763e66392203d33_JaffaCakes118

    • Size

      10.8MB

    • MD5

      fb2e9f7cf73d9b2dd763e66392203d33

    • SHA1

      5937a54b98ea9ade7e72d0cad3ce76fefb4f75b9

    • SHA256

      4b0d363ddceeaa55a4fd574915f4cbf4978d38f1cc99de6aa50d10e5c525148f

    • SHA512

      4d19d43b9e88d8b3971bf51fc0a0a3432af7640825389899beaec13f849cb928a44ef1f86363cb2081cd0203365dcdd6b9338ea82b333a49de6fc9b485ba1350

    • SSDEEP

      196608:iH2LiuIoP1HSsimvlG2etbYPvbJQlHJCO8ZD8CPFbYDSjAOxNcKu:LzP1pimtokJQlp8Z9kO5xuK

    Score
    7/10

    • Drops startup file

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

    • Target

      b0x3r.pyc

    • Size

      2KB

    • MD5

      16da97941981be0d6584483f7cf340e3

    • SHA1

      fdaefb4caa3437d2eca1cb3d1d9099382430ab6f

    • SHA256

      65bcf2e7dc24500d4abc000cd68f25349a2f2b3f38daa2b369344d91959970fe

    • SHA512

      ddee225e15591d09de66537891f8df9cbf2a66c1596bb91609e78e9914b5ea08fd77378b88c403b4a90369e71f003bfd7aace5dfcda5724f3d42e4e8fd91cb7a

    Score
    3/10
    behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks