Overview

overview

7

Static

static

3

6931f1c29c...18.exe

windows7-x64

7

6931f1c29c...18.exe

windows10-2004-x64

7

$PLUGINSDIR/ggh.dll

windows7-x64

3

$PLUGINSDIR/ggh.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6931f1c29c06565e0466880dd2b5901b_JaffaCakes118

  • Size

    566KB

  • Sample

    240523-a6evmsfe54

  • MD5

    6931f1c29c06565e0466880dd2b5901b

  • SHA1

    4ab995e55c92d3ef9c6395364ceaa7996a0af7d5

  • SHA256

    15ba5ecfbaf496bbdeb392cf9f20a9ce48ffa8ba51ec3723b17e0eb3c1e75c80

  • SHA512

    65ca6b3a533f18b9226a500ee17fc1d2452dd37ce6dbbe16cdc3fd6fbac62e79a58d586f636d24e0e1ca915bd72e5de80deec0ae29bb341f29fa7d38ad1fced1

  • SSDEEP

    12288:YaSYXMwqWGnNVJurilVGKLHwDjO5OjnB8cpI3bme:YXiMwqRnNVpqCHV0npQv

Score
7/10

Malware Config

Targets

    • Target

      6931f1c29c06565e0466880dd2b5901b_JaffaCakes118

    • Size

      566KB

    • MD5

      6931f1c29c06565e0466880dd2b5901b

    • SHA1

      4ab995e55c92d3ef9c6395364ceaa7996a0af7d5

    • SHA256

      15ba5ecfbaf496bbdeb392cf9f20a9ce48ffa8ba51ec3723b17e0eb3c1e75c80

    • SHA512

      65ca6b3a533f18b9226a500ee17fc1d2452dd37ce6dbbe16cdc3fd6fbac62e79a58d586f636d24e0e1ca915bd72e5de80deec0ae29bb341f29fa7d38ad1fced1

    • SSDEEP

      12288:YaSYXMwqWGnNVJurilVGKLHwDjO5OjnB8cpI3bme:YXiMwqRnNVpqCHV0npQv

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ggh.dll

    • Size

      121KB

    • MD5

      fcbc742ac61f5c96dcd770f000f267dd

    • SHA1

      ce091056e48bf8721239ed85255b4b8b1546c1ff

    • SHA256

      e99801d5552138c067fe86977a9e5c6270eaada568094d1237776d8031c339a0

    • SHA512

      404e2f621c4b3ff48171e249ee730532d62a8467cbd00cc4c0383682fd7979d049d31c07179f2c3066d60e97423375dac54c7781172fde0c6441e22f1c6c8330

    • SSDEEP

      1536:eiLaFhGNjQi086qvWRb4bGVE5IlQvIWSDJWfP4heUyUnpBFeLpBRRjMn:eVMNjuqq6tvIkfwfyAFeLpBRRjMn

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks