Overview

overview

4

Static

static

3

5b4d4e5e9c...18.exe

windows7-x64

4

5b4d4e5e9c...18.exe

windows10-2004-x64

4

$PLUGINSDI...ew.dll

windows7-x64

3

$PLUGINSDI...ew.dll

windows10-2004-x64

3

$PLUGINSDI...is.dll

windows7-x64

3

$PLUGINSDI...is.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...nk.dll

windows7-x64

3

$PLUGINSDI...nk.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

1

$PLUGINSDIR/inetc.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$TEMP/kwun...er.exe

windows7-x64

3

$TEMP/kwun...er.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b4d4e5e9cd2c1d4518e823c6f62f92b_JaffaCakes118

  • Size

    666KB

  • Sample

    240519-y7d7hagd2s

  • MD5

    5b4d4e5e9cd2c1d4518e823c6f62f92b

  • SHA1

    fda9f7d1e8305d3187137afd53dbddfb2b40d52f

  • SHA256

    b29ad0aa376658bc8d2343aac56e35f9e7ffbdd1e6110aef19beaeb6a8a51b31

  • SHA512

    8f322691cf46fb33c7754c9f9092daf94dca031c4a2c8fd565cbb269dd7e415a1643b25444e8ded4c39e08f1555bbfc464a880b31a2bceebd21e7044479b7ba6

  • SSDEEP

    12288:q1H2Bws6vFhIExmyCDU99V78xLupdZYJfVL9N3kOiqhBK0wr9+Am1ID:qyuLay+W9sufZ+L9NUfq9G9ZmqD

Score
4/10

Malware Config

Targets

    • Target

      5b4d4e5e9cd2c1d4518e823c6f62f92b_JaffaCakes118

    • Size

      666KB

    • MD5

      5b4d4e5e9cd2c1d4518e823c6f62f92b

    • SHA1

      fda9f7d1e8305d3187137afd53dbddfb2b40d52f

    • SHA256

      b29ad0aa376658bc8d2343aac56e35f9e7ffbdd1e6110aef19beaeb6a8a51b31

    • SHA512

      8f322691cf46fb33c7754c9f9092daf94dca031c4a2c8fd565cbb269dd7e415a1643b25444e8ded4c39e08f1555bbfc464a880b31a2bceebd21e7044479b7ba6

    • SSDEEP

      12288:q1H2Bws6vFhIExmyCDU99V78xLupdZYJfVL9N3kOiqhBK0wr9+Am1ID:qyuLay+W9sufZ+L9NUfq9G9ZmqD

    Score
    4/10
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KuWoNsis_new.dll

    • Size

      296KB

    • MD5

      37465ad07dca1c03e08d4c22f41a07ab

    • SHA1

      20466d2936fcbaf85008b4ffe5e6bc37cada0af7

    • SHA256

      0adaa9dfd9faefc20c996897afa4c97e68b93c5da5fdd8fd8c0e4818a7c16b86

    • SHA512

      bbc16a01f2d83c05c6ca20feaa3f1fe9de06724313930589fc31dd81fa44853717ac35364a4881d5d09b8538695bc44a919bf180e047379e78921530af02b6dd

    • SSDEEP

      3072:36tuWLuUwkN/sCK5kzKj/O7nAVXmqMg7SpSKiiwL86ImvC+m1DpVxrXZcci8H+83:36tu0ucU9rmmSGN86/vCpccHQG

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/KwMusicNsis.dll

    • Size

      419KB

    • MD5

      06029e624f1d222e59ac641b2ce426b6

    • SHA1

      6ba2875bee2eae79c0e1eaa8aa236038c8db6044

    • SHA256

      09fb37e917faea5c966bc3418d1d7e46e3d0b9912cadd56486ba5bb5ac0f7b10

    • SHA512

      516c04cfc31204879a0c938961208416ddd4ca7204606d630abe860c81422aa1316e45e29669ba01a7506af3f05284395c7c46524f2e73f36d3b4274203de70b

    • SSDEEP

      6144:wffwCybl87db7ty4wrqnh4V+mZUtU5iNtKxxaTlWWWWhP+mZUtUQlDtr:fCyJItcrqnhyiOx0T3ODV

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/NSISArray.dll

    • Size

      32KB

    • MD5

      8b43a3f284632edfbb51665b2e0b8a3c

    • SHA1

      af6ab111856be7af7212a82b052e8b5656159b35

    • SHA256

      336e588999bf6b1cd6c894dbf5a73b2198d48c935f8b1251687845cce467dc67

    • SHA512

      3a9add285d074db534937b193b92f8e0503c94c97b11f0abe5d9358342fbc57461ba1f559fa19e0522cfec914b8a007f11bec34abef17faaca5de8bda0dbaf94

    • SSDEEP

      768:uCyg1AT+KRSHKrHrkJg81qdJd18atH18Hup23+zj+:WgcwHgn8Uh8an8t0+

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/ShellLink.dll

    • Size

      16KB

    • MD5

      94cd75cf49a6f065e9009e1b3db601b8

    • SHA1

      4227235ff30cc0d79d8191dbce99b22d2b6369a1

    • SHA256

      247c2fe74cc14ff48fcef21036fe1066f9fd356c404f778a651b956f285a226b

    • SHA512

      8d3079f103f298e3430b08f829c527fbdad1590a01c2233e4d9f443137d7da4cf9287a53233e0c3c25743df1706d7fca2bf01e4d877b7a59c50c1decbb3d701b

    • SSDEEP

      384:nU68UnYPL5N+1U7dAON+1U7oSp23+r/jLvEc:nnzd18018oSp23+zjAc

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      7df8fb4196186f28cb308f9952d7ef64

    • SHA1

      f20a7259ad233ac3795b6e6537de658209a8fd40

    • SHA256

      72253837028abed272e5d50a3a6771933e9dd1aad73e90b8db4538aa9c786cbf

    • SHA512

      3f373d69664ce015ceab16c12ba4c806c3489b89ae9db282551ec2452acd2ced1d70ddd4de0ef8c56d62a715624c9d2ceddc968adf07e905f2e4c81c2850ae4b

    • SSDEEP

      192:jEvCcZ5+twSkY1YLKs4C/nWRfVMd8kQdOPEbpNZ8rQ6prY8:iCAGCYNs4C/nWxVg8kTM1yTFY8

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      61KB

    • MD5

      8bde726084a37cacd13a7e03259f953f

    • SHA1

      25400124fe8b399d659d5853f45e388a5a53b61a

    • SHA256

      19a8e8aaa8a8d6c6e49ffd054b1c62f562eda5909aa6e7863c65c5f858f5fd18

    • SHA512

      2f4932fade786312ba72c0f12d51bb1e561fd939597983dceccc0f0d7a53f18862f362473620c0788be039bb4977f0e23b541c61d67ab0ba9a043be963694b23

    • SSDEEP

      768:IWAGVKaWi9rA8RhcTG3HvTIVQf3EczqWhP6v4d18a18Gvp23+zjB:IWRZ1zcybIm3EcNhUM8K8/0B

    Score
    1/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      3ff6d8bfd6784eb4325102d9f76a0fe1

    • SHA1

      1eedf67a5f3ea636bcb621402bb679d3e08c0414

    • SHA256

      6da0ec15a4d3bbcfdd82d36838abcf8d57515d06049290801e5d71b4fd021dab

    • SHA512

      dcc6c3ad393503c6527528d4fccc8b4faf25c6ff50a08c29247ab144f444d31590e3f7a581b2c955b0a109b552f0b7e3b4ae1849228d31a220d46eb5e1e2d26a

    • SSDEEP

      96:pwsl+ukKv9ZmksljxV9RtSA2RV8YWpg5J4U3mZjwdE6o8zfFeZtrmfVEBbYezMJn:7l+UvsjtSA4NigAU3mtvkFeCNyxzMzV

    Score
    3/10
    behavioral15behavioral16

    • Target

      $TEMP/kwuninsthelper.exe

    • Size

      100KB

    • MD5

      b759bbbb1af31b9fab3954360086f828

    • SHA1

      f43c8195d0d8303a316218a4958b790c4f965818

    • SHA256

      9cd242782f6c82b27396c2a1133df29cfb3498f64875e756c155dcd10a647426

    • SHA512

      1914d5d0f780d33eccddb11b244387737c8fcc18deeeca3bed50e17510f0e5a7b8850afbe99dd3cd8037720af32e8c1599fd66ed4c2d77bdb74fcc5773dc42bc

    • SSDEEP

      3072:1F2XRicPKz1CTUCECCIeJ5KxaE9Zpf4EBLJaLn8:vD1WU6Zf4glaI

    Score
    3/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks