Overview

overview

7

Static

static

3

133ace94d3...18.exe

windows7-x64

3

133ace94d3...18.exe

windows10-2004-x64

3

EnkiAtualiza.exe

windows7-x64

3

EnkiAtualiza.exe

windows10-2004-x64

3

uninstallE...za.exe

windows7-x64

7

uninstallE...za.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    133ace94d3b83bbc0836a9740eb32543_JaffaCakes118

  • Size

    132KB

  • Sample

    240504-sctqtaha9v

  • MD5

    133ace94d3b83bbc0836a9740eb32543

  • SHA1

    165d0215cc91b218a2ae3b0b81826348cc6ad38e

  • SHA256

    6b2b0faf6030f1a8b0649997210c2f07e2d4696668b28576ae46846cdc6fc0f5

  • SHA512

    c5afdfa77c65331554ffdc4f7bcec911fcff3897e03606d97de9af7320aa3c84eaec497dda7dd6029cf02c76b4bc609f0b2e34be0aed2197c67e8082597d7ea4

  • SSDEEP

    3072:GKXxm6QmJSAnKDVMWcqpuywDNwmuEj2b28TIILBfurrY+:GKBJqZuhDrXyb28TIILdQY+

Score
7/10

Malware Config

Targets

    • Target

      133ace94d3b83bbc0836a9740eb32543_JaffaCakes118

    • Size

      132KB

    • MD5

      133ace94d3b83bbc0836a9740eb32543

    • SHA1

      165d0215cc91b218a2ae3b0b81826348cc6ad38e

    • SHA256

      6b2b0faf6030f1a8b0649997210c2f07e2d4696668b28576ae46846cdc6fc0f5

    • SHA512

      c5afdfa77c65331554ffdc4f7bcec911fcff3897e03606d97de9af7320aa3c84eaec497dda7dd6029cf02c76b4bc609f0b2e34be0aed2197c67e8082597d7ea4

    • SSDEEP

      3072:GKXxm6QmJSAnKDVMWcqpuywDNwmuEj2b28TIILBfurrY+:GKBJqZuhDrXyb28TIILdQY+

    Score
    3/10
    behavioral1behavioral2

    • Target

      EnkiAtualiza.exe

    • Size

      135KB

    • MD5

      3bd2e451980170fc09991ae80f30be97

    • SHA1

      9577eeeefce04276f98e1c29d4997d7007803ad1

    • SHA256

      717f875ddc296e69feb3c2d20987c93e4ef2e70336dc0983368ec670cbf4de14

    • SHA512

      9d7948670e982d3303a5d3e8b5c2d1bf141f33f82baec58dcfbac12406c76b73ded31003bdffaf40302786c596109ce24142d1b9532ccc0b3cb4418544a21e8e

    • SSDEEP

      3072:1AVbxdGVjdCf03Ai2b28TIILBtCbUMZeat30q9Y:1AVbqVjd+6Gb28TIIL329

    Score
    3/10
    behavioral3behavioral4

    • Target

      uninstallEnkiAtualiza.exe

    • Size

      40KB

    • MD5

      f05327f35a4de68e6145342393f11197

    • SHA1

      6eed7cd3b684b6803f0114225368f9d3ee682275

    • SHA256

      f7500338944d3e23fc5ee62c11d93723120754c15f89a8fbdfdf6dcfa3fcd5d4

    • SHA512

      47c3b6f60a1765b64c875ef875c4f6a8ef6dee20e36411ae03af5544f2aabdd6aec10f388fb471ec75f5222c43689efdd81a76ab1905735ce1a5b204778bd3af

    • SSDEEP

      768:+VTHKXxOfL68GWucUAPm4SSAoT1qSdQckLwy2SCVIn0D3/u8j+4Mi1dzcu9agJR/:szKXxOfbRUQmJSAB080TSaIn0DVMi1NN

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks