Overview

overview

7

Static

static

3

649595f16f...18.exe

windows7-x64

7

649595f16f...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.exe

windows7-x64

1

$PLUGINSDI...er.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    649595f16f2424c2de2c3ada21381214_JaffaCakes118

  • Size

    280KB

  • Sample

    240521-ysgn3sgh7z

  • MD5

    649595f16f2424c2de2c3ada21381214

  • SHA1

    739f52ca5b194d49124a80529fc4392574be4264

  • SHA256

    3d68b93488baed2a39031a2eaad6c5acca5963c073a0354ba2479976ab11de6e

  • SHA512

    10dd3e63f15249e542928e016014fcdf91cd1f25e22eb98634394e15d16a735e1ceb6b9d6bebee41a47c98911a878960a7ff94cd266498eb805b05ce06d31977

  • SSDEEP

    6144:asaocyLCnE0v2qa7GwW/5iT4BSjyG+yVYHh2dZfQ2bJq6YFN:atobHVLVyER+8Yf+q9FN

Score
7/10

Malware Config

Targets

    • Target

      649595f16f2424c2de2c3ada21381214_JaffaCakes118

    • Size

      280KB

    • MD5

      649595f16f2424c2de2c3ada21381214

    • SHA1

      739f52ca5b194d49124a80529fc4392574be4264

    • SHA256

      3d68b93488baed2a39031a2eaad6c5acca5963c073a0354ba2479976ab11de6e

    • SHA512

      10dd3e63f15249e542928e016014fcdf91cd1f25e22eb98634394e15d16a735e1ceb6b9d6bebee41a47c98911a878960a7ff94cd266498eb805b05ce06d31977

    • SSDEEP

      6144:asaocyLCnE0v2qa7GwW/5iT4BSjyG+yVYHh2dZfQ2bJq6YFN:atobHVLVyER+8Yf+q9FN

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/installer.exe

    • Size

      207KB

    • MD5

      de8e9cb3a534359f5809b9c5980ce365

    • SHA1

      34def3bd6d46a97daa546671513733b9a94c1e8a

    • SHA256

      653db07daeedb23437e723f00ab4f7320e5bb6e6689e38e54896ee44d84cfc71

    • SHA512

      dffe030837a4babfb06419ffd893f54b9856e0f1aafb320e923a7a4aea894154207b0f2998fd0ecaaf0105c6ff1bed95d93a8ae2f531e1c8c3aca248a35b1fe2

    • SSDEEP

      6144:+RrKVYBooo1v0eB24qUxG1DJpqC+D6RwpKJ/eGRKP:+hKyov1ceE4rxG1DJpqkwpKJ/eGRK

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks