Overview

overview

7

Static

static

3

63922f852d...18.exe

windows7-x64

7

63922f852d...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDIR/pwgen.dll

windows7-x64

3

$PLUGINSDIR/pwgen.dll

windows10-2004-x64

3

$_2_/Downl...er.exe

windows7-x64

1

$_2_/Downl...er.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63922f852d31ae18b66835daaad56a02_JaffaCakes118

  • Size

    591KB

  • Sample

    240521-rh7n7agf95

  • MD5

    63922f852d31ae18b66835daaad56a02

  • SHA1

    0daa2fbb4c3d2d6cddbb36541581457c2a00fc0b

  • SHA256

    484b90ccdbc52d7c5284ec1c73d8e9d361e6eec2524ba6be82bab24f596d98f1

  • SHA512

    2ff16a8c652b1cbd47e2c406d6f57ace40f2090d594bc5787159e81e2bf9204d9ab3206ac9310779eaf6932a843655130a38272c347211f499aab0786d2f9694

  • SSDEEP

    12288:RwMDD4QDmDOIwow3i31NwRksyarzF8nv10nZqb5Btm:RtgQfPGFNrv104tm

Score
7/10

Malware Config

Targets

    • Target

      63922f852d31ae18b66835daaad56a02_JaffaCakes118

    • Size

      591KB

    • MD5

      63922f852d31ae18b66835daaad56a02

    • SHA1

      0daa2fbb4c3d2d6cddbb36541581457c2a00fc0b

    • SHA256

      484b90ccdbc52d7c5284ec1c73d8e9d361e6eec2524ba6be82bab24f596d98f1

    • SHA512

      2ff16a8c652b1cbd47e2c406d6f57ace40f2090d594bc5787159e81e2bf9204d9ab3206ac9310779eaf6932a843655130a38272c347211f499aab0786d2f9694

    • SSDEEP

      12288:RwMDD4QDmDOIwow3i31NwRksyarzF8nv10nZqb5Btm:RtgQfPGFNrv104tm

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      7579ade7ae1747a31960a228ce02e666

    • SHA1

      8ec8571a296737e819dcf86353a43fcf8ec63351

    • SHA256

      564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5

    • SHA512

      a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      c498ae64b4971132bba676873978de1e

    • SHA1

      92e4009cd776b6c8616d8bffade7668ef3cb3c27

    • SHA256

      5552bdde7e4113393f683ef501e4cc84dccc071bdc51391ea7fa3e7c1d49e4e8

    • SHA512

      8e5ca35493f749a39ceae6796d2658ba10f7d8d9ceca45bb4365b338fabd1dfa9b9f92e33f50c91b0273e66adfbce4b98b09c15fd2473f8b214ed797462333d7

    • SSDEEP

      384:EVJOXQZkjhm+Np3aWgzxljzbbEUhU7ya4LtU0Ac9khYLMkIX0+GBty3S:EeXQcm+NpqWgzxljzfEUhUua4LtG

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/pwgen.dll

    • Size

      16KB

    • MD5

      a555472395178ac8c733d90928e05017

    • SHA1

      f44b192d66473f01a6540aaec4b6c9ac4c611d35

    • SHA256

      82ae08fced4a1f9a7df123634da5f4cb12af4593a006bef421a54739a2cbd44e

    • SHA512

      e6d87b030c45c655d93b2e76d7437ad900df5da2475dd2e6e28b6c872040491e80f540b00b6091d16bc8410bd58a1e82c62ee1b17193ef8500a153d4474bb80a

    • SSDEEP

      96:Rb32p/4mp563gfdaDf2GEFd69qI214YgU+dXXDtFCOdd7KPcC+pyTY62l2z252NJ:YCQAED61dpEEN5VifUbw2mDG0

    Score
    3/10
    behavioral10behavioral9

    • Target

      $_2_/DownloadManager.exe

    • Size

      1.1MB

    • MD5

      bac1287761471343e93022d5327828ef

    • SHA1

      84d98d42d6bcc8654387bae74940443b95104562

    • SHA256

      d8d6be0a9819a56ac2d845bc436def913b216c82988166fa34ffa6e4de034ce1

    • SHA512

      898c54a68cb562c9f2c50f7a5773a6ff89c0d44ca3d43543332ea27f91949de39f0dabf1e4ff05667da9eb68540cd64ef89a2f8d45f50c8a58b1945217410ce8

    • SSDEEP

      12288:bPZEUyw+5QxixdHPzy8LsxtX4vPyLwMDDG:bPZEdwvkxdHWLtXDLt+

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks