Overview

overview

7

Static

static

3

50158ba95f...18.exe

windows7-x64

7

50158ba95f...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    50158ba95f987a38f20befb8993d5846_JaffaCakes118

  • Size

    581KB

  • Sample

    240517-r9gbbach62

  • MD5

    50158ba95f987a38f20befb8993d5846

  • SHA1

    89f5e7e4537670c13e5af469e697ba836ba049c9

  • SHA256

    147684f323e898fc78a4c275114859bfac1e8ce4974bf9a1bf15e2a50fad1035

  • SHA512

    6a361b1f0eecaa3fd58b6bf355ef8f64a7781303039fb880af2cb2012a0077848733ccc9c121271f8a36436674e42d87a82fb497132f4019c958bdf1601f83b5

  • SSDEEP

    12288:ro4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9GlS:ro4hmjrebk29PdR0Kponczne4W57

Score
7/10

Malware Config

Targets

    • Target

      50158ba95f987a38f20befb8993d5846_JaffaCakes118

    • Size

      581KB

    • MD5

      50158ba95f987a38f20befb8993d5846

    • SHA1

      89f5e7e4537670c13e5af469e697ba836ba049c9

    • SHA256

      147684f323e898fc78a4c275114859bfac1e8ce4974bf9a1bf15e2a50fad1035

    • SHA512

      6a361b1f0eecaa3fd58b6bf355ef8f64a7781303039fb880af2cb2012a0077848733ccc9c121271f8a36436674e42d87a82fb497132f4019c958bdf1601f83b5

    • SSDEEP

      12288:ro4hUnM8rC6ibkVAw9gPdR0YaFYponURzneJOYLT5go9GlS:ro4hmjrebk29PdR0Kponczne4W57

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/kaxgcem.dll

    • Size

      153KB

    • MD5

      64ffd6dbd03f55408fbc6640317368f0

    • SHA1

      227d86d47d53d5f62a2227e6d2b282519d38005d

    • SHA256

      b8d9b2c53ea62560b03c2ef9f139370380b4c931d1fc02172bc7e1a98e41ffc3

    • SHA512

      ba03c31e00ec24a7bd4e59088feaee3eb389b459cbd041613222f95d9ea1689920127d390d81c2e0000ccf72f67a2043cf81dd324cab3c887003aa93783501c8

    • SSDEEP

      3072:GIM31De7jBYnZRWxnXnCjTDX/+dG/QsSauQ:9M31EzyjTjIGcQ

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks