Overview

overview

7

Static

static

3

50ecc35a54...18.exe

windows7-x64

7

50ecc35a54...18.exe

windows10-2004-x64

7

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50ecc35a543a683d1c25ee62100b21c2_JaffaCakes118

  • Size

    413KB

  • Sample

    240517-xcpjbada6y

  • MD5

    50ecc35a543a683d1c25ee62100b21c2

  • SHA1

    04e369b119f881627ba89d3b453164b77051ee76

  • SHA256

    518601dff51642f794f17841a749a9de071f19e5752ce7e0c35cad84cd103e92

  • SHA512

    8c17a8ee05a298c4eb18ee4d914da35d12ffb7493300e2005f8c91ba81f886707b7eac8a12400cec058ca64bdf3a0a9bca4c5eacce490a06b7a8a0443419e203

  • SSDEEP

    6144:XOPjvGIQQSqNp0xM6IIx5mkETtTnL3cwSoDwsSHjjM9bwHJIX+0qdtN11:wyIQQfNpq7f0Hcw4MR2DHtNf

Score
7/10

Malware Config

Targets

    • Target

      50ecc35a543a683d1c25ee62100b21c2_JaffaCakes118

    • Size

      413KB

    • MD5

      50ecc35a543a683d1c25ee62100b21c2

    • SHA1

      04e369b119f881627ba89d3b453164b77051ee76

    • SHA256

      518601dff51642f794f17841a749a9de071f19e5752ce7e0c35cad84cd103e92

    • SHA512

      8c17a8ee05a298c4eb18ee4d914da35d12ffb7493300e2005f8c91ba81f886707b7eac8a12400cec058ca64bdf3a0a9bca4c5eacce490a06b7a8a0443419e203

    • SSDEEP

      6144:XOPjvGIQQSqNp0xM6IIx5mkETtTnL3cwSoDwsSHjjM9bwHJIX+0qdtN11:wyIQQfNpq7f0Hcw4MR2DHtNf

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Base64.dll

    • Size

      4KB

    • MD5

      f0e3845fefd227d7f1101850410ec849

    • SHA1

      3067203fafd4237be0c186ddab7029dfcbdfb53e

    • SHA256

      7c688940e73022bf526f07cc922a631a1b1db78a19439af6bafbff2a3b46d554

    • SHA512

      584ae5a0d1c1639ba4e2187d0c8a0ac7e54c0be0a266029c4689d81c0c64a7f80e7d918da0df5c6344f9f7a114f30d8f2feda253b29e813bae086604731a3d8a

    • SSDEEP

      48:SxSrr7xd14m4bLKwvnvcfDw1hEiauGkDVK+hIg4qT9/3lt:zr7xd14m4qw/vGwrEickDVthcE/

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      254f13dfd61c5b7d2119eb2550491e1d

    • SHA1

      5083f6804ee3475f3698ab9e68611b0128e22fd6

    • SHA256

      fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28

    • SHA512

      fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7

    • SSDEEP

      192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/ZipDLL.dll

    • Size

      163KB

    • MD5

      2dc35ddcabcb2b24919b9afae4ec3091

    • SHA1

      9eeed33c3abc656353a7ebd1c66af38cccadd939

    • SHA256

      6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1

    • SHA512

      0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901

    • SSDEEP

      3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk

    Score
    3/10
    behavioral13behavioral14

    • Target

      uninst.exe

    • Size

      171KB

    • MD5

      b0cc142e9291b79d7c279cd17ccafefc

    • SHA1

      62a0246281458923acf27cbf005b08f20c42dc98

    • SHA256

      c2652a971261b77a393efe01a3f457eb0df88586d26bbd49221e22ec4f3a375a

    • SHA512

      28160be30d4408f05c8e2bcd58452dcbdcee41b8ff5958946c2e6e0161626d8bcd2aab029165606b5aa42bf204f0ea3ec607c88ee6dc8a2c99e096ba69962474

    • SSDEEP

      3072:H3c1fP4AJJC6KCc5T9W6Dd6SLem+RgEzFYALxM6IiD3:XOPjm6AGEQSqNp5LxM6IG3

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks