Overview

overview

7

Static

static

3

04d8bd0abf...18.exe

windows7-x64

7

04d8bd0abf...18.exe

windows10-2004-x64

7

$PLUGINSDI...ti.dll

windows7-x64

3

$PLUGINSDI...ti.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04d8bd0abfe9c448f8b3f08c8c181390_JaffaCakes118

  • Size

    581KB

  • Sample

    240428-k34dyacd24

  • MD5

    04d8bd0abfe9c448f8b3f08c8c181390

  • SHA1

    00b40dd8d27ec3403d2cd5d588b7808eedd89579

  • SHA256

    8a379a4e3c2c7d4165b20b961af2a6799b89a9d729a31cecc324c7ad2bb2d54d

  • SHA512

    1933deb59010f4cf685ed78300923631e0a5cc34ca99ebf69e8eb8286b4774cdf0e4ee598b7ef7866d6620a8d7ca36733ebdb259972c09e85995ef869ec301a3

  • SSDEEP

    12288:+TDJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+Q:+PJbl+36tKPdhJ7d

Score
7/10

Malware Config

Targets

    • Target

      04d8bd0abfe9c448f8b3f08c8c181390_JaffaCakes118

    • Size

      581KB

    • MD5

      04d8bd0abfe9c448f8b3f08c8c181390

    • SHA1

      00b40dd8d27ec3403d2cd5d588b7808eedd89579

    • SHA256

      8a379a4e3c2c7d4165b20b961af2a6799b89a9d729a31cecc324c7ad2bb2d54d

    • SHA512

      1933deb59010f4cf685ed78300923631e0a5cc34ca99ebf69e8eb8286b4774cdf0e4ee598b7ef7866d6620a8d7ca36733ebdb259972c09e85995ef869ec301a3

    • SSDEEP

      12288:+TDJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+Q:+PJbl+36tKPdhJ7d

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/cgibuti.dll

    • Size

      153KB

    • MD5

      9b081b4f84974a46cffcf1ef1a2e85f9

    • SHA1

      70a1b83bad19d28195f2df22c3d213a04b42fb2b

    • SHA256

      303f74df9812b639b66f919804039d1e295ffae8e543fa4349507110ac766752

    • SHA512

      4539a458b1d2ba61ffcf71ea59addd13727d26606f73dbfb21053d68d5656010dae5791d486789c14653c6fb953a7dc284c3a80db2b1970a0e7f0778ab77dbbf

    • SSDEEP

      3072:G+HP0gEeGhEuaa6sjnWhIn4t52ELJ+PG/vsXO4HQi:j0gEL+Rt52ESGN4HQi

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks