Overview

overview

7

Static

static

3

49e7a82849...18.exe

windows7-x64

7

49e7a82849...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...no.dll

windows7-x64

3

$PLUGINSDI...no.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    49e7a82849587b871cd282dd39acac74_JaffaCakes118

  • Size

    645KB

  • Sample

    240516-hq7jqahd47

  • MD5

    49e7a82849587b871cd282dd39acac74

  • SHA1

    fff180cc6bea335918555f8f79987eb498514209

  • SHA256

    233be9731df9c1d6ef65bd984abf42d0ecaa64f47ad1adae2fd7ee97a6efeae6

  • SHA512

    3f1d72b58f9b385b7673988d6d9d4be012f82cd1f16f64a3fa1e1b39e0633084d1478e6c41686ebb637c521b7b1ea3ed8f867d6fa4da88c2c5ef73fbb0287e87

  • SSDEEP

    12288:gYKHA0LWl6UiGE2yqss2OQ2PWXtnjwvyPPC5JVAnZonfc8vy4hX:gfzWcUiGdDR2OfWXtnjwvzf+nZoE86A

Score
7/10

Malware Config

Targets

    • Target

      49e7a82849587b871cd282dd39acac74_JaffaCakes118

    • Size

      645KB

    • MD5

      49e7a82849587b871cd282dd39acac74

    • SHA1

      fff180cc6bea335918555f8f79987eb498514209

    • SHA256

      233be9731df9c1d6ef65bd984abf42d0ecaa64f47ad1adae2fd7ee97a6efeae6

    • SHA512

      3f1d72b58f9b385b7673988d6d9d4be012f82cd1f16f64a3fa1e1b39e0633084d1478e6c41686ebb637c521b7b1ea3ed8f867d6fa4da88c2c5ef73fbb0287e87

    • SSDEEP

      12288:gYKHA0LWl6UiGE2yqss2OQ2PWXtnjwvyPPC5JVAnZonfc8vy4hX:gfzWcUiGdDR2OfWXtnjwvzf+nZoE86A

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ZipDLL.dll

    • Size

      163KB

    • MD5

      2dc35ddcabcb2b24919b9afae4ec3091

    • SHA1

      9eeed33c3abc656353a7ebd1c66af38cccadd939

    • SHA256

      6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1

    • SHA512

      0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901

    • SSDEEP

      3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/pmkxbno.dll

    • Size

      170KB

    • MD5

      0ffe8e17f407165a0115a355f5657e98

    • SHA1

      8fa75731788f4de926b10d097b93cecf3b8722ae

    • SHA256

      e9252f11ca2874d428c8b83adc5f5cd022b5d879cd033acd0441ce134839d3b5

    • SHA512

      fbc4b05176078783f2f8edcb5872cfb7ca6e731cdc8a9e43aa9413e0a5e95681b2ba58da6e853aa33fc37cd22e85753a34d475614f76adbf636e29a109ca1d3f

    • SSDEEP

      3072:G8HLx5QOoA6gUuTAQTpxn9ffrd/+0w3zIacV:RLM2pnfrpmRcV

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks