Overview

overview

7

Static

static

3

3af5b05605...18.exe

windows7-x64

7

3af5b05605...18.exe

windows10-2004-x64

7

$PLUGINSDI...kp.dll

windows7-x64

3

$PLUGINSDI...kp.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3af5b0560508870fc7013e15a17ea86a_JaffaCakes118

  • Size

    677KB

  • Sample

    240512-tljsmsgf45

  • MD5

    3af5b0560508870fc7013e15a17ea86a

  • SHA1

    80b37f3f424b3ff590029a33549cf15f9428c35a

  • SHA256

    1267cbb8ff272072cbcd46e371e4974dd0c685bf284fd60f1526209d9b2449af

  • SHA512

    229355931feaf4b28f2ec6cee048ed702c66c40e1f8a14bed44241bdcb72871cd12cee96375622d8736e0fb11e92dd3a7950ddfc0745a63cd720e005ff841d68

  • SSDEEP

    12288:xUEHlVl0pQUlIo20J4WcLbq4MAmIhMrSbaXDL3CmXA+xeS6AeDaU:x3N0TlIo20J4WcLG4M6qS+XDzCErd6A0

Score
7/10

Malware Config

Targets

    • Target

      3af5b0560508870fc7013e15a17ea86a_JaffaCakes118

    • Size

      677KB

    • MD5

      3af5b0560508870fc7013e15a17ea86a

    • SHA1

      80b37f3f424b3ff590029a33549cf15f9428c35a

    • SHA256

      1267cbb8ff272072cbcd46e371e4974dd0c685bf284fd60f1526209d9b2449af

    • SHA512

      229355931feaf4b28f2ec6cee048ed702c66c40e1f8a14bed44241bdcb72871cd12cee96375622d8736e0fb11e92dd3a7950ddfc0745a63cd720e005ff841d68

    • SSDEEP

      12288:xUEHlVl0pQUlIo20J4WcLbq4MAmIhMrSbaXDL3CmXA+xeS6AeDaU:x3N0TlIo20J4WcLG4M6qS+XDzCErd6A0

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ktvrqkp.dll

    • Size

      158KB

    • MD5

      3c169ae0cc799f03fad14ebcc05f3d96

    • SHA1

      ec4839ee8458429f57749f245045fc1deb30d832

    • SHA256

      82bb5429daf7e9b364670303176370ed5d85e375ec249c6457655dbb1fd9dfc0

    • SHA512

      4a9e97dafa1f6a0df9c79496769a19a124360111d95d503ba519c4e960c000ad69d284b5bc2001f4c51e4b9d2ce50ec20981533b984bf7562c7cacf79d8c7ab9

    • SSDEEP

      3072:Bhp/L6MadCMGlNPm61Fu5xLGH2+Lw5H8Q52OFNz:BhBDl9mVxk2IP3OFN

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks