Overview

overview

7

Static

static

3

4f5cccab30...18.exe

windows7-x64

7

4f5cccab30...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...jy.dll

windows7-x64

3

$PLUGINSDI...jy.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f5cccab3042a07dd391ce1c2e4a1129_JaffaCakes118

  • Size

    637KB

  • Sample

    240517-lh2kaacb86

  • MD5

    4f5cccab3042a07dd391ce1c2e4a1129

  • SHA1

    8de3b954058e961807a5ebd084386e695d8fe2da

  • SHA256

    21b663710e92bdf18d9418ec4e8288f8545112262ea0e98db04e49455fbe9441

  • SHA512

    d3d601fc578866ab55b1f1987d9ebbc1955be1d28c1ed959db49c394223cbb08644ddae1fc7fdc94570114638250f819ed60033c02077281da1acc6d42d93dd3

  • SSDEEP

    12288:OaIwSXj+0IeDOIz6cLtpXVhkT6/45nmCLL6knmDwOVHKWuYlnV+Wgfc8vy4hUL:OaI+oaIzbLD/4BL+knmcQH40186FL

Score
7/10

Malware Config

Targets

    • Target

      4f5cccab3042a07dd391ce1c2e4a1129_JaffaCakes118

    • Size

      637KB

    • MD5

      4f5cccab3042a07dd391ce1c2e4a1129

    • SHA1

      8de3b954058e961807a5ebd084386e695d8fe2da

    • SHA256

      21b663710e92bdf18d9418ec4e8288f8545112262ea0e98db04e49455fbe9441

    • SHA512

      d3d601fc578866ab55b1f1987d9ebbc1955be1d28c1ed959db49c394223cbb08644ddae1fc7fdc94570114638250f819ed60033c02077281da1acc6d42d93dd3

    • SSDEEP

      12288:OaIwSXj+0IeDOIz6cLtpXVhkT6/45nmCLL6knmDwOVHKWuYlnV+Wgfc8vy4hUL:OaI+oaIzbLD/4BL+knmcQH40186FL

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ZipDLL.dll

    • Size

      163KB

    • MD5

      2dc35ddcabcb2b24919b9afae4ec3091

    • SHA1

      9eeed33c3abc656353a7ebd1c66af38cccadd939

    • SHA256

      6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1

    • SHA512

      0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901

    • SSDEEP

      3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/gfsozjy.dll

    • Size

      161KB

    • MD5

      7481deaedf47d0e44a1e32d02967c894

    • SHA1

      af8876fac39a06859b9289dd2520eca86702f635

    • SHA256

      9bc6d24b330e7c3666197317d2e23167e8d849c4120a3a0e3ed03e1d4514c85d

    • SHA512

      566ffff38ae283e033e1e30598706fba232eb61ce4f9df4c67ca8568bebf32c22f8e0a9bc4966f40ca42f8798f105ba53bba17731cd06fdb1f6a25744049ae37

    • SSDEEP

      1536:GzTDJ+sSDf5obf2Nsu08hIT2QinOmx8If0vlM188XSvGLp0bLTbE2jgY+Kcows8V:Gz5ZS4QOBK88CvGLKEIz+QVdQxZGc

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks