Overview

overview

7

Static

static

3

64799b0477...18.exe

windows7-x64

7

64799b0477...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.exe

windows7-x64

1

$PLUGINSDI...er.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64799b0477c20276f1f2a0c940aa851b_JaffaCakes118

  • Size

    276KB

  • Sample

    240521-x4h6lsfg74

  • MD5

    64799b0477c20276f1f2a0c940aa851b

  • SHA1

    b28799be97ffe3e5a352d97ea3b54149917a8ca6

  • SHA256

    152e0a7a5b4e847d45c2ec0442720604201e77187848bcedff0a582e8705ffdd

  • SHA512

    92b3da120ff1438299e74ffce838f343f101ab2369054a11766eb293b16bcb936ee3b7ca61fa2a4d6e30bb5fd816aeb7db33d9e78493c6d7376ad700db3e3741

  • SSDEEP

    6144:+saocyLCPcZvJNGRQFlVuoNz6MnIC/HKS4lVrBGd4UOuNEkY:+tobZJNBlVVzFxf/4XrBKOjk

Score
7/10

Malware Config

Targets

    • Target

      64799b0477c20276f1f2a0c940aa851b_JaffaCakes118

    • Size

      276KB

    • MD5

      64799b0477c20276f1f2a0c940aa851b

    • SHA1

      b28799be97ffe3e5a352d97ea3b54149917a8ca6

    • SHA256

      152e0a7a5b4e847d45c2ec0442720604201e77187848bcedff0a582e8705ffdd

    • SHA512

      92b3da120ff1438299e74ffce838f343f101ab2369054a11766eb293b16bcb936ee3b7ca61fa2a4d6e30bb5fd816aeb7db33d9e78493c6d7376ad700db3e3741

    • SSDEEP

      6144:+saocyLCPcZvJNGRQFlVuoNz6MnIC/HKS4lVrBGd4UOuNEkY:+tobZJNBlVVzFxf/4XrBKOjk

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/installer.exe

    • Size

      214KB

    • MD5

      7cf3bce5ecf2aea97b49e2eba8ca0aba

    • SHA1

      543f5fc23df08f946488d27b2fb16b13b6311d1a

    • SHA256

      7358afae03a24b31c0d82ee4e5fd2f17cafe6c3bdd8e26326aa4118f2169f736

    • SHA512

      5f9184189940af27e25ae2988db8d15923dac81b2410c5fe3287f126fb50df43735fccb4e4d9f376e9f24700604c157aa1828622dab54014d9583a56ab698d8d

    • SSDEEP

      6144:GQyZPNKiygF7R/7qMVtxQEtS6wIZyaNof:GQWPkbGlCEtS6wwFo

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks