Overview

overview

8

Static

static

1

Assistant/...64.exe

windows7-x64

1

Assistant/...64.exe

windows10-2004-x64

1

GameHallMain.dll

windows7-x64

8

GameHallMain.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

4

Uninstall.exe

windows10-2004-x64

4

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    10669a79fd59f5559692becf633c4948_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240503-njqwaadc9w

  • MD5

    10669a79fd59f5559692becf633c4948

  • SHA1

    d3dedbf6e938c8408ed4aad890c6fbf8e4475379

  • SHA256

    c086ad0637afd248b5cb93960f8c3606e4d6783757be99c1050ad6e2ec13dbbb

  • SHA512

    ebf5c18941d27c6a85c7f504fb355e689506cdb1b976277c33e41c6d15b44c863e8353b7db74510252aa8a71ec2975f4644c1df92aed40f151bae231b063091a

  • SSDEEP

    49152:cWIFVTNKCsk5SJG5xooWa/atnJpaJSIYmXO1n/HgGL6rfrp:GFVgO52GA0Jr5UnYGufrp

Score
8/10

Malware Config

Targets

    • Target

      Assistant/HelperTool64.exe

    • Size

      217KB

    • MD5

      8a0d04865361a1c89a31b47f57d19cc4

    • SHA1

      510cb1cb3d3f7fcfb63642fd43c57d02c18798eb

    • SHA256

      5e28bac0aaac9ff5ee304a203d1fbaecebb05f8f32d97a799fb02dae3dd586f1

    • SHA512

      aac21794db3c5579a868f84f39c6a7ff1b60535dd53ed0ed655917664149e803771b593a2797dd19035a95a83f2b90279684b021239add57e70a5bce542ac78c

    • SSDEEP

      3072:SN/pn+Dgf1+94mCtSS+NUTIVIcp3oylKcShHXdJ7yRlqnv+970x06QEt4uVZ3kD:SrmmRm6SSMUTXyMcwHXdJ7DvISCD

    Score
    1/10
    behavioral1behavioral2

    • Target

      GameHallMain.dll

    • Size

      5.7MB

    • MD5

      98d916578f4e6405232580963dd8b81c

    • SHA1

      031329c64fe9a5e0e15b6c3c8d913be36e752b19

    • SHA256

      65504f34d76db0372979658ea524d32a3aac4579f279b13728b958c5c9b0cc9e

    • SHA512

      c9d0b48fec58ed4663ba58a847aeb686b119a3d96cdb4b83f87f858aef652e18b28e4b52489deca1512a74c79451e7a53159bd174f69ffc78a9142e427701c41

    • SSDEEP

      98304:QLkmVLWcsuZJZqBcCldxV+4AqD/GDCSRgJheSzT2:7mVLkpdxV+4Am/WCxa

    Score
    8/10

    • Blocklisted process makes network request

    behavioral3behavioral4

    • Target

      Uninstall.exe

    • Size

      232KB

    • MD5

      ad999a53e962ef536c561e2b2def4390

    • SHA1

      61a30e413966ae8093f802700c3fd3ca49f8295f

    • SHA256

      e8b587c65e890926d127ad454fa65ec9f1e0869697c34277a19599cccd48012d

    • SHA512

      2d8cd932d30faa22aed3394783730ae6b0028605e14b357e9713f8d605d58c52c01bdb935d03d145e1f7d8ca6b71ce840a6460c017b7895af8e8568169bc6bb5

    • SSDEEP

      6144:bewfV4DTTTsTTHPTT+PTTaTTbTT6THTTeTTTMTt5kTRTT2PTT7PTT5TT+TTPTTRf:blVITTTsTTHPTT+PTTaTTbTT6THTTeT5

    Score
    4/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/FileInfo.dll

    • Size

      278KB

    • MD5

      7d773d726d5357b27b30ab8de1e42bb0

    • SHA1

      593720bf9d9afa5665007304d6fb1502719d02aa

    • SHA256

      93edd4c19314537aa106d80c2ed642c15fc6cc2f67e992f35367095c13ab5f68

    • SHA512

      6d399e83d6206064a328aa47e18b133c6d5f132449d4a4c791594ab903e015acfc7c23ed8e2b0853ee26e5bcb1333719e20bcf5a13b0d4772461bb06175ea5cb

    • SSDEEP

      3072:u9so2AnuoF+tGhyrIXBeooGevi0pf3Q9GnuG9+U7dscRfUZhc9mB5ENOT:u9rIoF+Ay+BDgpnt9b+cR86QENC

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      28KB

    • MD5

      ca1c1129591b793d2753a4c425ef6ef1

    • SHA1

      0f417cdd887d57c5839c409b4bb76597af02ed1e

    • SHA256

      86ec9f64c3635568a18c11c94e81e8cb20b94e1d97a192132bc55f9281909d60

    • SHA512

      1eded730b2e1c51fd8639e56ca532b497777f0ae1f4b5397966335d3c8966c3fb1e46742fa2fc3c84ecf687dbe19f4e3129eb3d1e0b0d72c9c154de18d3af69f

    • SSDEEP

      384:ix8XpXIgtyMKJnoHLJ84QNindpkEYPLeZRbxeMj8pkEVSS7mb5JNNzFwhhiY:iSYgty1orJ8zNiIEFnEoS7mh3whd

    Score
    3/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks