Overview

overview

7

Static

static

3

6390e656e8...18.exe

windows7-x64

7

6390e656e8...18.exe

windows10-2004-x64

7

$PLUGINSDIR/ins5.exe

windows7-x64

1

$PLUGINSDIR/ins5.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6390e656e8c3f7d855c73624535b5292_JaffaCakes118

  • Size

    270KB

  • Sample

    240521-rgvy1agf59

  • MD5

    6390e656e8c3f7d855c73624535b5292

  • SHA1

    a751db486ff419a4c21cfd905200dc631aa9dcde

  • SHA256

    22ed4f6e54f0e4bd471070a781d488dc0b374887f9c587a535d0ad04450bf812

  • SHA512

    601a5209809fd5fe972e96088317316707a093fadc0f8a371d9c05122ce8ace82521a6b49da8cb2455e2a872ab3b853fbf91b7c2bffaeb8bc801ce84375c9fb4

  • SSDEEP

    6144:DsaocyLCaAOJzNWQ1b9B8RvLO8dcLY42d/WVYX:Dtob7AIzYQZMRZdcLYf/OS

Score
7/10

Malware Config

Targets

    • Target

      6390e656e8c3f7d855c73624535b5292_JaffaCakes118

    • Size

      270KB

    • MD5

      6390e656e8c3f7d855c73624535b5292

    • SHA1

      a751db486ff419a4c21cfd905200dc631aa9dcde

    • SHA256

      22ed4f6e54f0e4bd471070a781d488dc0b374887f9c587a535d0ad04450bf812

    • SHA512

      601a5209809fd5fe972e96088317316707a093fadc0f8a371d9c05122ce8ace82521a6b49da8cb2455e2a872ab3b853fbf91b7c2bffaeb8bc801ce84375c9fb4

    • SSDEEP

      6144:DsaocyLCaAOJzNWQ1b9B8RvLO8dcLY42d/WVYX:Dtob7AIzYQZMRZdcLYf/OS

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ins5.exe

    • Size

      214KB

    • MD5

      081f1ef743489a25c99fdd25f6d4f70d

    • SHA1

      dfdbd1caf714644f6c1b1b383f717028c39a2db0

    • SHA256

      ed6b25ef9345aa31303cdc1cad322b1607eda3bf7bfefe7445105baddd59c635

    • SHA512

      bf2962affa9ffb92cbaa17389a71b6ecf548cf6629237444a4b078bdcbd29cdd825055e2fe49530053c864bb1ad42726c083bb7db6d20b0afc939363365ec4ca

    • SSDEEP

      3072:qpFqhbMvJOdrwfJ2aQTOhPCGketb/rFwhAsg/J/uz9VK94faaDjqo2YP9afwtfej:qGU0wJWTODk8bZw+/VOK9OqoDP9afx

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      9f4abe9c1c095cdb505df5db52644d44

    • SHA1

      94295f495f5535e0143107d3ca34141c943ec0b5

    • SHA256

      e41bd375070919e1e194a7c1ca722a30d648a7fa7a4b5c33fb05660813c18bdf

    • SHA512

      d1b6ab6d3e51f69e6ec79aa23629afc9ddedd8a7a668ea61b06bec115c95e2a35dca3ff9b9eb649e4bfece9a2fcd0832fed45f2308dca874f6e819708ed48169

    • SSDEEP

      192:k/QeHNWSvUTfWdXw08LYKFayGLb3MRlbOVlR:OjBvwudT8LJxGnMRlyVlR

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks