Overview

overview

7

Static

static

3

23e0072bab...18.exe

windows7-x64

7

23e0072bab...18.exe

windows10-2004-x64

7

$APPDATA/T...at.sys

windows7-x64

1

$APPDATA/T...at.sys

windows10-2004-x64

1

$APPDATA/T...64.sys

windows7-x64

1

$APPDATA/T...64.sys

windows10-2004-x64

1

$PLUGINSDI...et.dll

windows7-x64

3

$PLUGINSDI...et.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows7-x64

1

$PLUGINSDI...in.dll

windows10-2004-x64

1

$PLUGINSDI...in.dll

windows7-x64

1

$PLUGINSDI...in.dll

windows10-2004-x64

1

$PLUGINSDI...in.dll

windows7-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...oc.dll

windows7-x64

3

$PLUGINSDI...oc.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ws.dll

windows7-x64

3

$PLUGINSDI...ws.dll

windows10-2004-x64

3

Bmbt.dll

windows7-x64

3

Bmbt.dll

windows10-2004-x64

3

Bmcmon.dll

windows7-x64

3

Bmcmon.dll

windows10-2004-x64

3

Bmctr.dll

windows7-x64

1

Bmctr.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23e0072baba7b9ea62f2ed1fc1d52131_JaffaCakes118

  • Size

    22.1MB

  • Sample

    240508-jmmwksce92

  • MD5

    23e0072baba7b9ea62f2ed1fc1d52131

  • SHA1

    9b1e33d9e51149e59978084e2c052b618136270f

  • SHA256

    284a18ed393b0e60ca6fada933c6612df9862d024038c51a0ab8906ccbdcc990

  • SHA512

    3bfe0b3b7efd1156ae78aa3454fcaadf676b09207996cbb1b8dfc221f079a1bbcdf8fe4f463a430d50467a386edf51169d0b4fa68ce7ebac043327cd1e82d07d

  • SSDEEP

    393216:cntfiT0iFP+FBTpoAICN50ousZnni/NcyTQ0hMLb/lD/gUfKX9GBq27cL:AtfmPwlprIG53ilXQTLb/1/tiX9sFQ

Score
7/10
linkqr

Malware Config

Targets

    • Target

      23e0072baba7b9ea62f2ed1fc1d52131_JaffaCakes118

    • Size

      22.1MB

    • MD5

      23e0072baba7b9ea62f2ed1fc1d52131

    • SHA1

      9b1e33d9e51149e59978084e2c052b618136270f

    • SHA256

      284a18ed393b0e60ca6fada933c6612df9862d024038c51a0ab8906ccbdcc990

    • SHA512

      3bfe0b3b7efd1156ae78aa3454fcaadf676b09207996cbb1b8dfc221f079a1bbcdf8fe4f463a430d50467a386edf51169d0b4fa68ce7ebac043327cd1e82d07d

    • SSDEEP

      393216:cntfiT0iFP+FBTpoAICN50ousZnni/NcyTQ0hMLb/lD/gUfKX9GBq27cL:AtfmPwlprIG53ilXQTLb/1/tiX9sFQ

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $APPDATA/TXWiFiDriver/txwifinat.sys

    • Size

      32KB

    • MD5

      e5be3d30a36b5e9ce5d25dcbe7b1e99a

    • SHA1

      ff998e9baa2ae4a42b3d237fd11186546ecb29bb

    • SHA256

      a73b74cee94e0f3f201564d08bbc318a024754946bd14c044a47b6a7ef8aafbb

    • SHA512

      0c00d63613f8e469cffadbfee318befbff2eabac86faf3c85913b668bab8e6d1fb140da76d7329fd976ab9b05bb09274cf43838341af8278e397c25915f194e2

    • SSDEEP

      384:RxS6Cg88YpnHc6U8+JAxpC9oRi+qYayO47fkBinYPLhUgtAeMR5Q:SxpnHcWC3+qYw4o0dQ

    Score
    1/10
    behavioral3behavioral4

    • Target

      $APPDATA/TXWiFiDriver/txwifinat64.sys

    • Size

      36KB

    • MD5

      541537e0a532fc613e806f5c27df0c79

    • SHA1

      d3983dbcad39b177b62773542c89e9243e3892de

    • SHA256

      04d7d7c651295e8ce801720b0d39606792aace79dcc0bcb9f20afa41533fb994

    • SHA512

      51512c8c804eabb9073115ceac8cc2ea830872a296c4255a5dcc86c81c0cca9c8515b3fefce4cc4cac33575f8d2b688e2b0dceb1ee634f90e2b787fa2d33b53a

    • SSDEEP

      768:KsDmlOWA2zEv/PFYiazPBF7JClFrFDpshpi7:lDB3iiaLwHBDpshpG

    Score
    1/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Internet.dll

    • Size

      10KB

    • MD5

      d4d774e8cf4c2dc669f4f2003334ccf4

    • SHA1

      3759ad7e7195c40836e4a465b2db7749673a5a1d

    • SHA256

      04c22ec18d614a76181709482a7307b2e59d4c45f42bf1f6313a974982e519be

    • SHA512

      bb4898a1c457faf8b7a711c6040c959b1d8361b4dab758283c1f531d4155803f2a6fa3bd57cf8490cbec98499738deaa830dc44e0067d3da8970e34bee2d453e

    • SSDEEP

      192:PLfR+vHCJ1oKnYe+PjPSrcy++v1Etr9ZCspE+TMQrFW:FmCznYPLltAeMh

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      17KB

    • MD5

      9bc41bcacae7d39ea49d416f24458697

    • SHA1

      8b8806eda2a80d9b34d8d807935aa4a1f40d9003

    • SHA256

      ce612773d6bd6d15f748f922d9a1d281e67221bceca6b9c9f6ddec4e401a9ac8

    • SHA512

      e325c2b0a2b05548b66e204ff4b408cb54eadc785613f4a29e4061f65e9844fe07aa80c8672f64cf5ba30d80a5086a46051ae80a4a1903af79501540aae7555e

    • SSDEEP

      192:RVL7iZJX76BisO7+UZEw+Rl59pV8ghsVJ39dx8TjtnYe+PjPSrcy++v1Etr9ZCsy:K7NsOpZsfLMJ39ehnYPLltAeMKa

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/TXSetupPlugin.dll

    • Size

      154KB

    • MD5

      fc24d842bee47ac5b715990d8a245aa9

    • SHA1

      22831e433b46c19a6c1efb2e0aaa1da9f3c24d68

    • SHA256

      44757e0d4ac80fb0db87d9a6fc479b6ac31aec9bf727ef80a9d6162e8b15ef08

    • SHA512

      a2c49714532422d5f3762cd45984e15b2054fb838420e9d74f9b71fd293e7f1105bbe656fe9a87ab418936b75c3ebf67cf871bae448db4eaccdab94b92fc6d12

    • SSDEEP

      3072:oHAGCZRSOp/OcBAVVYwG7cC37WAWFyj+lgFG7:oHPCy2UV6V7cC37W9kAt

    Score
    1/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/TXUninstallPlugin.dll

    • Size

      1.1MB

    • MD5

      28cd534fcf9d006e62cb26fc9056bc16

    • SHA1

      500ee789ff2088fefd456c9ac8506376359a58a0

    • SHA256

      fdd318b6b0954ce3183f6c6de90ac7a95273ac292adca12762c9a447eab34149

    • SHA512

      19d3089f0dd3f9e6893667c61a800a6c043f90633461db6a51b3a9e2e4d410de9348e3a6ca51fd1b7df9201f36d863d4501bc0e177143c0c0e8e95b29ff45eff

    • SSDEEP

      24576:S9c8TavrtuJwnXVIxSj2vxeXJR0tkBUks3mv:S+Dtu+VYSj2ZelsWv

    Score
    1/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/TXWindowPlugin.dll

    • Size

      101KB

    • MD5

      f473fd16b42fc12e31cf0f7969e73122

    • SHA1

      e69c72d81d38c2cf16282ded52b84ab31d4ff031

    • SHA256

      cd943661b7804c45a05625d1deb3ceb9eac3f60b4f1cf227562f7cdc7ffe0af2

    • SHA512

      a51f4104e283a7a8a902cfac970ecf2b4a86ff0bd2ac3c85c9d4419a5359899bff473ac97d7cd38b6094b4060ca5c6ab4a712644a82aaf37b53028aa6b7beed2

    • SSDEEP

      1536:1uv8CxJRyOgecvfQ4WYfIDPzp1gBgztc6P7ekl52LpjZtvXg6DYv:M3xKO5cXQxh1gBgtc6xWpjvvQ6DM

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/WndProc.dll

    • Size

      9KB

    • MD5

      a96f557108dd0ec546d3578789e1ab66

    • SHA1

      58cfacd351bc209c18c9a9e7f46e1dfc0298ce41

    • SHA256

      b271e4a57fa3a739b265a9b55aeb366b369a876e09d8b8a7e3ed3da9b7f24e90

    • SHA512

      e9b6a8496981b793e2d8874414fbe50ea0ea34785ee3319b6dccea778c0e44edb88ee8699f9cfc21edaf5a708b5fac5b57b27dec627a56b44979c448a9787b70

    • SSDEEP

      192:r5GEWnYe+PjPSrcy++v1Etr9ZCspE+TMQrmKM9:r5GHnYPLltAeM9v

    Score
    3/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      27KB

    • MD5

      3ce829b63a04ddb4bb00211a16cb47a5

    • SHA1

      91e69792d40c7a8e2db51636d7fb5cf3a0d88f50

    • SHA256

      fc868b11746f72a2758a79bc82bd4253679fe20f719256ce7a8720e2000e5c1b

    • SHA512

      b47777a8566f5b09ed223479c2e48f046729c6591eda2eb5d5c952af00475a1333fc2b2580041eb9763602d70d6a172820fb4ec77ec57d29e714665524178f91

    • SSDEEP

      384:NjyFkRnq6ad3aqWB7xUjBWv3UixAr0Ac9khYLMkIX0+GbyeZOI6zdQYtAeMZjq:FZNqLdaqC7xUjS3nxAqOI6zIjq

    Score
    3/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      15KB

    • MD5

      141fde44b6b2b0fc3d7d81e62c70f4ce

    • SHA1

      755483b608b4519dbbd73eb5c07184f15d5533a7

    • SHA256

      7788feb3ec52b52aa0b839341cb2c955e36546fa85577dfe7dde7852d961913c

    • SHA512

      de598b349196a4eedada4b020ac9b6fb9610a18589e28d7778608a5a00e651cb3a300c1ddb1bd3a5adae05a3f6cee583ff57402bf19c61ce9451d236ba60828f

    • SSDEEP

      192:3aujesS4HREEK5MYxtdqn420udnYe+PjPSrcy++v1Etr9ZCspE+TMQrp3hsR:3acesSMExtdN20qnYPLltAeM+3hi

    Score
    3/10
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      12KB

    • MD5

      d5637dc55b0eab0f0c49752ea4823285

    • SHA1

      79964b6f0a7576823d0a64d21075aa70448e7429

    • SHA256

      9f1558b1183ede0a7135481b5161572b5ab2f0568126cff37b428a98242f070a

    • SHA512

      f10bcdc3dda5ec681706d0e4527fd859070f7e1ecaaadecd0210dc64103a5d2e97bdf3cd3bd35af94960babb4a8d4f90893b7dc54ad5741fcae50ad09e9fa118

    • SSDEEP

      192:Mygp3FcHi0xhYMR8dMqJVgND/nYe+PjPSrcy++v1Etr9ZCspE+TMQrqBkC:Zgp3Wi0PYMOeqJVgNLnYPLltAeMNN

    Score
    3/10
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/nsWindows.dll

    • Size

      16KB

    • MD5

      552fff61cb72928253be15861aaffc1d

    • SHA1

      126b2b28958dd38787bc5a564248334c5b89f786

    • SHA256

      e03931b60dfc3fc5a387c037af2f8f04377d73a347f1d1e8f4cc8aad8efca1d1

    • SHA512

      89ccd6fdda7a72f8f74a7ea84a5a15961e9903be7afe6648f4615b26e3231552f75707696e55485740e3fd2a80ffbf66401bc95176f1a313b90d41db63042b5d

    • SSDEEP

      192:fqUyuov2gQWaoJNMSsSCL8XPrw3BOGZnYe+PjPSrcy++v1Etr9ZCspE+TMQrGlmy:fqUyuov2gPriIXPrw3fnYPLltAeMPlf

    Score
    3/10
    behavioral25behavioral26

    • Target

      Bmbt.dll

    • Size

      1.5MB

    • MD5

      a67ad710d0bce067e179e1d9c8beb518

    • SHA1

      3a747477318c9fe6f4631144d8c2aec99a06d35e

    • SHA256

      4cc6003ec2e7441f108ac43d36ef89ebb13f9f41a8f23ead4d489b7fbbbefcb8

    • SHA512

      3d94f028ce80c00782ed0f55ddbc1eb538b86444a0d090790ac6e5822af14e2a1bf106a10a686e5f599ff2973b6f03e6d8fccc03e7967fed83f5ce511e4f53db

    • SSDEEP

      24576:QaQluAtYLo1vwPPmo0XWpaKOoADNPQBA9d87tlCRnjLy4qBDT1mdI+xEe:dQQAkodwPeo13uySKoRjL8DT1mUe

    Score
    3/10
    behavioral27behavioral28

    • Target

      Bmcmon.dll

    • Size

      100KB

    • MD5

      bb4685108a58021a8886d83f81820ed5

    • SHA1

      daa8a73b3f535bbe51a052000c430022f2b19cbb

    • SHA256

      a2da91ab675eb813757957596e3dddd43ea7716df47fcf61bdca167611402076

    • SHA512

      cf382ad18b94c7eb750e19532996fcfe929d7a28f88279679fc0fe69dd85f702a1c892d22184263d0cc0c51f980e9b5e6737f18caf246dd7f61329428c603d22

    • SSDEEP

      3072:WIsYjPy9GGX2tEA540d5YR3he+/nXoCrvLOZyfb:33W99X0540d5yhdLOZyj

    Score
    3/10
    behavioral29behavioral30

    • Target

      Bmctr.dll

    • Size

      27KB

    • MD5

      422db4eb8ffa25ca41649266b6af183d

    • SHA1

      876a743db67b40bf9e5acfb017fcd76be5321ce9

    • SHA256

      0e55ca8fda6b896c8ae96807349ca4423659d1c18ce96f13ef2481ca0ce182a8

    • SHA512

      b68df8fad84e6bf6b88bfdc2b40bb2396a26c98dc6d93dde300595180b0f86be151b43a78c50c738b62c5b4d7ca565a26556c7352a847a4c537c0a41c61df61b

    • SSDEEP

      384:ifttcU0npH16UKGXkL7PaOQjW0OtaY8+SlQzwT/UOZnPVqOBXxQYtAeMRQ:ifc16UKGYPi6aYfSussOZndqweQ

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks