Overview

overview

7

Static

static

3

639b08f118...18.exe

windows7-x64

7

639b08f118...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...se.dll

windows7-x64

3

$PLUGINSDI...se.dll

windows10-2004-x64

3

$PLUGINSDI...ig.dll

windows7-x64

3

$PLUGINSDI...ig.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI..._n.dll

windows7-x64

3

$PLUGINSDI..._n.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/nxs.dll

windows7-x64

1

$PLUGINSDIR/nxs.dll

windows10-2004-x64

1

$TEMP/$_73_/ext.exe

windows7-x64

1

$TEMP/$_73_/ext.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    639b08f1189a4d4ef841a5182ddadd19_JaffaCakes118

  • Size

    569KB

  • Sample

    240521-rq95aaha53

  • MD5

    639b08f1189a4d4ef841a5182ddadd19

  • SHA1

    4ed1652a57f4f31fe81666dd57b49984bce14aa4

  • SHA256

    f1416fdec43d4faefe704e392a2a35f79a924edc499857f2148de8d3b41cc4a4

  • SHA512

    ff866a06ec61127d9906720022d791f5e6b6fab839a465698d0afd8bdfaa18ef204f05fe40005416bbcb881381f345ba53c0a8e7c448b62c88cb82d94ebb46b8

  • SSDEEP

    12288:DdhXPOrqHajpLfaD1Xf6Qe472ExgS8F1pAR/qC1thX2rno66:DdhXm+6dORXXe9F1oDthX/66

Score
7/10

Malware Config

Targets

    • Target

      639b08f1189a4d4ef841a5182ddadd19_JaffaCakes118

    • Size

      569KB

    • MD5

      639b08f1189a4d4ef841a5182ddadd19

    • SHA1

      4ed1652a57f4f31fe81666dd57b49984bce14aa4

    • SHA256

      f1416fdec43d4faefe704e392a2a35f79a924edc499857f2148de8d3b41cc4a4

    • SHA512

      ff866a06ec61127d9906720022d791f5e6b6fab839a465698d0afd8bdfaa18ef204f05fe40005416bbcb881381f345ba53c0a8e7c448b62c88cb82d94ebb46b8

    • SSDEEP

      12288:DdhXPOrqHajpLfaD1Xf6Qe472ExgS8F1pAR/qC1thX2rno66:DdhXm+6dORXXe9F1oDthX/66

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ButtonEvent.dll

    • Size

      4KB

    • MD5

      55788069d3fa4e1daf80f3339fa86fe2

    • SHA1

      d64e05c1879a92d5a8f9ff2fd2f1a53e1a53ae96

    • SHA256

      d6e429a063adf637f4d19d4e2eb094d9ff27382b21a1f6dccf9284afb5ff8c7f

    • SHA512

      d3b1eec76e571b657df444c59c48cad73a58d1a10ff463ce9f3acd07acce17d589c3396ad5bdb94da585da08d422d863ffe1de11f64298329455f6d8ee320616

    • SSDEEP

      96:hrA2+5HGZFYJf9D8IjDflDCoMzncsGSmE:hE2+5mMJfJ8v1zFGSm

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/CustomLicense.dll

    • Size

      4KB

    • MD5

      ae97fd89eec5000b400e6bc7e8db0e56

    • SHA1

      7ec1073f712ff5bd68deec894c36c0385bacdd68

    • SHA256

      bdf2d5ac95808ffe5b29aac71fcc2eb64bdca5b272a9c4082a74e20d0b1f20da

    • SHA512

      2e0d0182d7fda547bfd3f25c56d0c20ba75809ac8d4c96c2b40aad3db9a61c730a650c7e02c6050ab37abdf8ce66ea1e4479921d72e21f55b6fd42a3dc033ec3

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/IpConfig.dll

    • Size

      114KB

    • MD5

      a3ed6f7ea493b9644125d494fbf9a1e6

    • SHA1

      ebeee67fb0b5b3302c69f47c5e7fca62e1a809d8

    • SHA256

      ec0f85f8a9d6b77081ba0103f967ef6705b547bf27bcd866d77ac909d21a1e08

    • SHA512

      7099e1bc78ba5727661aa49f75523126563a5ebccdff10cabf868ce5335821118384825f037fbf1408c416c0212aa702a5974bc54d1b63c9d0bcade140f9aae1

    • SSDEEP

      1536:CPDzpyvLtmY7SeAmhPzV8+i7kRuACUxHf91MionF9JTwrLPG5zfO+lP7:UZl1e7L4ARzC3dwrLPG5zG+lP7

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/NSISArray.dll

    • Size

      18KB

    • MD5

      c4279b957d4dc593074479bc088b74c1

    • SHA1

      53de3c1bb13a19a0ae19d9db5cbef1b919520f83

    • SHA256

      b279c82b7e6f6bf652c5b5440c20f01d522f6e8d3c79b72076e18796166316f6

    • SHA512

      c1746122489ceb6c3af6c535beccd8d9d853c53dcb41274f122c43bc0ea5f9fe83873218e22d9c69a39f83ed54e7d5b8b9ab0adefaec23cf5d8c3a51438688c5

    • SSDEEP

      384:DCuvLnlVk/V6r7OpI5czJwLJuJJKymEA3SLNk4Eqe05:bDlVk/Xp7TKymeLN1Eo

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/NSISpcre.dll

    • Size

      164KB

    • MD5

      bfe060c22b44914e05d3f5367de6c9fe

    • SHA1

      24c72b0b57b0066a5e8b235104a0502400e44b9a

    • SHA256

      43041f8540dccbc33268bfbef53037d17170b037f6393e77c21429f303ae828f

    • SHA512

      ad3a23edd8d62b198e4a2ccf03f6d607dee41fa23fd6f9dfabdc5ee424b5e22a6e00b8a28e50fe177829a2cc25ce05484423e97c682036fc5146e2adf560bc44

    • SSDEEP

      3072:5YFyk+vtvpoYYPkoYMtXTP5V+4Km//sbJVlseEOb+Y+UT:KFyznYntXL5XKCk9MeEm7

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/inetc_n.dll

    • Size

      20KB

    • MD5

      e541458cfe66ef95ffbea40eaaa07289

    • SHA1

      caec1233f841ee72004231a3027b13cdeb13274c

    • SHA256

      3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420

    • SHA512

      0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c

    • SSDEEP

      384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      acc2b699edfea5bf5aae45aba3a41e96

    • SHA1

      d2accf4d494e43ceb2cff69abe4dd17147d29cc2

    • SHA256

      168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

    • SHA512

      e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

    • SSDEEP

      96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX

    Score
    3/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/nxs.dll

    • Size

      6KB

    • MD5

      8ca09b6200ffa05b54c6672d855beb4a

    • SHA1

      daa16fe49c8b2250e9d2383b861cda51f876de49

    • SHA256

      033e93ad470241c92762924ccfceafb849a525e263e5d4a3dbcfc2e07a8803c3

    • SHA512

      6ab97181ec45430888d8ad3fd411de22423e1c057833e282af085a975198338c95f7ba10b7c69f33298afc88ddd38d01ab010998fd4a8ba8abb8561796bf9f14

    • SSDEEP

      48:qnnScipSivON+tPTCkWqjqoay6NvC9A220B20BNatQK5zAgQIl0YawUy11TKcZ8Q:an3N+2AjqoWvC5VRxMLawvxM

    Score
    1/10
    behavioral21behavioral22

    • Target

      $TEMP/$_73_/ext.doc

    • Size

      574KB

    • MD5

      42badc1d2f03a8b1e4875740d3d49336

    • SHA1

      cee178da1fb05f99af7a3547093122893bd1eb46

    • SHA256

      c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf

    • SHA512

      6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c

    • SSDEEP

      12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A

    Score
    1/10
    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks