Overview

overview

7

Static

static

3

3093678f31...18.exe

windows7-x64

7

3093678f31...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

ShowImage.exe

windows7-x64

1

ShowImage.exe

windows10-2004-x64

1

SmileScreenShot.exe

windows7-x64

1

SmileScreenShot.exe

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3093678f3170aca9b98e852570e6fa54_JaffaCakes118

  • Size

    144KB

  • Sample

    240510-xqftbscd6x

  • MD5

    3093678f3170aca9b98e852570e6fa54

  • SHA1

    19b8cd48c5544d0dfde39670288e0990aff447f2

  • SHA256

    2f4f18afd4c4ef23a0cc5d37742f52e5d120bce654f6301ec92d82723ed7c3fb

  • SHA512

    0b59e77ae679dc17d705a06f8eaa5e5054a350ced280b2bd981d3f88b822222d380b0ba99075433cac1a1dd61a280de5912ee8c2c404c6db35dcab2467d2ec2c

  • SSDEEP

    3072:ukOplcjVhQcR45bNa6QzGFizTDM/M9L5khhyVplo3AIRjEc7ob:urlwH406QCMrM/MJ5kX0pIf3ob

Score
7/10

Malware Config

Targets

    • Target

      3093678f3170aca9b98e852570e6fa54_JaffaCakes118

    • Size

      144KB

    • MD5

      3093678f3170aca9b98e852570e6fa54

    • SHA1

      19b8cd48c5544d0dfde39670288e0990aff447f2

    • SHA256

      2f4f18afd4c4ef23a0cc5d37742f52e5d120bce654f6301ec92d82723ed7c3fb

    • SHA512

      0b59e77ae679dc17d705a06f8eaa5e5054a350ced280b2bd981d3f88b822222d380b0ba99075433cac1a1dd61a280de5912ee8c2c404c6db35dcab2467d2ec2c

    • SSDEEP

      3072:ukOplcjVhQcR45bNa6QzGFizTDM/M9L5khhyVplo3AIRjEc7ob:urlwH406QCMrM/MJ5kX0pIf3ob

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      d753362649aecd60ff434adf171a4e7f

    • SHA1

      3b752ad064e06e21822c8958ae22e9a6bb8cf3d0

    • SHA256

      8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586

    • SHA512

      41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d

    • SSDEEP

      192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      a3f1e5d94d8e07121bad59af16ef358a

    • SHA1

      9223fa516807ec103e5381ce8b2b7295a846a89f

    • SHA256

      bedcdb63f027107c471fe244554c3038fb4caf9f96f7eab2d430f76f2f4f768b

    • SHA512

      6b466ff8dd9855048dcdd3b21760bd0cce77b1aed561d8cf2099089b97910f8d2da86970a2023c59e1807a45138cc25fcb899f9df67845bdf22a44ec7b491050

    • SSDEEP

      96:riqPXbjaKyFU40KhveE+6nrh9MXEiGDdoDxUxOLqtJ1taRhElfRx2:riqPXaKy1k4h9kvDxUxj/tWgfRx2

    Score
    3/10
    behavioral5behavioral6

    • Target

      ShowImage.exe

    • Size

      40KB

    • MD5

      2130e93686d6d22dea7446968473709e

    • SHA1

      2b19d5f0d45e65b0b6f4ee7bfb3aae65d05b22e9

    • SHA256

      e187eaff39d5fc28c6e77d8bbddaf2e5dd15a569aa636a4344d9b85174af05e1

    • SHA512

      5cecea146de446affedca48e77c09f00193d575a5495902e7077c80413aaaadda3b0f805065c7ec1a46e5c5f036fdab0ce4613cfd1b5869e7b03466fde5f3e76

    • SSDEEP

      384:0eImBvuxDxoQ7zKlPwldnMWuF/WKjDcOZAAZKyS:0Xm7QvKCnUHf7AAAyS

    Score
    1/10
    behavioral7behavioral8

    • Target

      SmileScreenShot.exe

    • Size

      136KB

    • MD5

      5297a1ac97fbfdcc35317794d8b42048

    • SHA1

      d137085179fd360121aeff29b7747f49e6e0a580

    • SHA256

      c7bf5ae12979e463b22b7f4fa4c22b81240365d386284c0fb71c5a9a47b739b5

    • SHA512

      77df50412324ed491754284579243135d1547cde8e8d8a98615a3b57e1077feef7add27bf49191e86de7bbfc0565019eac7837a6526d7f901b292f987bc28ccb

    • SSDEEP

      1536:KvhEYds4IQR8mJEkj2ggFOYSYfv1pDPAn0oppM4wDXM18Ip:KtdjIQR8miPRFOYSYXrU1ppM48XMb

    Score
    1/10
    behavioral10behavioral9

    • Target

      uninst.exe

    • Size

      52KB

    • MD5

      350802dbaa4cfbdaac49d0542ff0859d

    • SHA1

      a412e6334c818bde856a1771c83b6b6d1877530f

    • SHA256

      d8c796e7518ceb8d9add1ca94d8dc0991d7fc3eb520ba5043adb67da03dfea9a

    • SHA512

      3162e846cf735978db5ea828b8e0b13215610e1960c7ab96f1b1cfe329209d286e035343d52563f47c55b5bd07576ae975f3cfb43fc0e8837a288b45e13706d6

    • SSDEEP

      768:CUEx8n86PUQ1cFpl+Bd7it9igPfORwhIj8d+thiNcM9atgd2iZQAm6kRRS+NoJRJ:uiTPUgOplcC2RVhiNctgdLeAyNZe3

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks