Overview

overview

7

Static

static

3

03bd3f3b36...18.exe

windows7-x64

7

03bd3f3b36...18.exe

windows10-2004-x64

7

$PLUGINSDI...iw.dll

windows7-x64

3

$PLUGINSDI...iw.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03bd3f3b36799dc30dfd69acc9f092be_JaffaCakes118

  • Size

    567KB

  • Sample

    240427-136r3ahh9y

  • MD5

    03bd3f3b36799dc30dfd69acc9f092be

  • SHA1

    3d960d8b78c6feab5a3123d221e26f7c11230746

  • SHA256

    34d432a3141ede8dbcaf72ce0cd818a4eda64c84c742b59f0ee1682dc6fd2064

  • SHA512

    8a45dcd1d85bf06225aac330546f1ccbce10d21670b727f9d13f61f3990df5c2b9d2a2456421dec8286089e3a7c0e89282d45c41f033eb3ed5d0ce90ef810edb

  • SSDEEP

    12288:LNAUjYTlb0YK/v87SJiLWjI4ULs5SlITBOX+v1hMLeA2LXuz:LNAU8pb0M2fIvLamI9OiOKA2LO

Score
7/10

Malware Config

Targets

    • Target

      03bd3f3b36799dc30dfd69acc9f092be_JaffaCakes118

    • Size

      567KB

    • MD5

      03bd3f3b36799dc30dfd69acc9f092be

    • SHA1

      3d960d8b78c6feab5a3123d221e26f7c11230746

    • SHA256

      34d432a3141ede8dbcaf72ce0cd818a4eda64c84c742b59f0ee1682dc6fd2064

    • SHA512

      8a45dcd1d85bf06225aac330546f1ccbce10d21670b727f9d13f61f3990df5c2b9d2a2456421dec8286089e3a7c0e89282d45c41f033eb3ed5d0ce90ef810edb

    • SSDEEP

      12288:LNAUjYTlb0YK/v87SJiLWjI4ULs5SlITBOX+v1hMLeA2LXuz:LNAU8pb0M2fIvLamI9OiOKA2LO

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ctsmgniw.dll

    • Size

      107KB

    • MD5

      bd816285a89fcab1f1a262f3a5337e46

    • SHA1

      baa91d6016bbca17b5d40c56c5e0cd50401b255d

    • SHA256

      2fdb5e3495a527997aff9e67085effdfaebf7116a41e9b567fd9450f86e7522d

    • SHA512

      794790c32bd3f9b6acd69bc485317f0495ead182be8e695d1d86ac5f8ed6193693257ff5e425246580dc1ceddcd2e00437c7cfffcf82a0e695f4b512973017e2

    • SSDEEP

      1536:yxMrFJufXhU9CLVJ4QRnjv4yPu5zppdWMYHTp2k4wsHS/j0N:yxMrFIfxU9VQtr0xWYk4wj/j0

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Matrix ATT&CK v13

Tasks