Overview

overview

7

Static

static

3

2003974d5a...18.exe

windows7-x64

7

2003974d5a...18.exe

windows10-2004-x64

7

$PLUGINSDIR/forwi.dll

windows7-x64

3

$PLUGINSDIR/forwi.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2003974d5a71d716911b46108f2d409f_JaffaCakes118

  • Size

    574KB

  • Sample

    240507-j79wvagc3w

  • MD5

    2003974d5a71d716911b46108f2d409f

  • SHA1

    6398b3662354016f4676ba577b2e95c08b1380d4

  • SHA256

    9b304dad1b14ad0e6b1205eab205470b5467aad50da89958e4c4954ea36979e0

  • SHA512

    01b09d77f6b8535bdb7a0ddb0f006b5b08b66e4feb57849c3d3aa774c87a8a5239a16561b6f4a0063faa87255166708816d88dbe0fd3ab3391fe7828f2a5aa38

  • SSDEEP

    12288:X/2kWZALgQwGeTX/vHGNHOQ7/Z3oskSNAQ46DUYFjr+4eeqJHw:X/2kWZALgQwLDONH17/ZYskSNAfYFP3b

Score
7/10

Malware Config

Targets

    • Target

      2003974d5a71d716911b46108f2d409f_JaffaCakes118

    • Size

      574KB

    • MD5

      2003974d5a71d716911b46108f2d409f

    • SHA1

      6398b3662354016f4676ba577b2e95c08b1380d4

    • SHA256

      9b304dad1b14ad0e6b1205eab205470b5467aad50da89958e4c4954ea36979e0

    • SHA512

      01b09d77f6b8535bdb7a0ddb0f006b5b08b66e4feb57849c3d3aa774c87a8a5239a16561b6f4a0063faa87255166708816d88dbe0fd3ab3391fe7828f2a5aa38

    • SSDEEP

      12288:X/2kWZALgQwGeTX/vHGNHOQ7/Z3oskSNAQ46DUYFjr+4eeqJHw:X/2kWZALgQwLDONH17/ZYskSNAfYFP3b

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/forwi.dll

    • Size

      120KB

    • MD5

      dc42cbe414856ab1675a783baa1d1d2e

    • SHA1

      571e4eef179021bc1c9951378ab9994a1b5db244

    • SHA256

      cf99480981732b5a18231bb26a245707396adb5ee9a120c2ce6fecedba693538

    • SHA512

      8066ca01c678458cfede4709339b2006d4fad9a9e522f0d36c24c16aa24e05720e15ff12a19fb0ca7d830a6e6bbfefb9ae298f40602e17d039cc3c7a1b61b788

    • SSDEEP

      1536:yL63YAZ8HYSipNXE9EZrlmZbeBpXdRNLNgDVqWnwBjjZQ4MSv:yLf94SifOZQ5ADVqvjjZQjS

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks