Overview

overview

7

Static

static

3

6dfb490d34...18.exe

windows7-x64

7

6dfb490d34...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

Help.chm

windows7-x64

1

Help.chm

windows10-2004-x64

1

Right Clic...er.exe

windows7-x64

1

Right Clic...er.exe

windows10-2004-x64

1

Tools/File...or.exe

windows7-x64

1

Tools/File...or.exe

windows10-2004-x64

1

Tools/File...lp.chm

windows7-x64

1

Tools/File...lp.chm

windows10-2004-x64

1

Tools/New ...lp.chm

windows7-x64

1

Tools/New ...lp.chm

windows10-2004-x64

1

Tools/New ...or.exe

windows7-x64

1

Tools/New ...or.exe

windows10-2004-x64

1

Tools/Righ...lp.chm

windows7-x64

1

Tools/Righ...lp.chm

windows10-2004-x64

1

Tools/Righ...IE.exe

windows7-x64

1

Tools/Righ...IE.exe

windows10-2004-x64

1

Tools/Righ...lp.chm

windows7-x64

1

Tools/Righ...lp.chm

windows10-2004-x64

1

Tools/Righ...er.exe

windows7-x64

1

Tools/Righ...er.exe

windows10-2004-x64

1

Tools/Righ...32.dll

windows7-x64

1

Tools/Righ...32.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6dfb490d34058e5e8f42d327660afce2_JaffaCakes118

  • Size

    3.9MB

  • Sample

    240524-k1w7vaca87

  • MD5

    6dfb490d34058e5e8f42d327660afce2

  • SHA1

    f777c539f2828fb1bff07e25b0d508124ddc75d6

  • SHA256

    8f3cfcedaf845387e4f7d07c77db62ad6f3c6856995ed8e0d1cdcecef17e0bbc

  • SHA512

    ff37d47fab5db4d7c5723451afbcdba8364b73824e0ecbd3343c8b6db22bdc22af709055a00678f15c3696f0d5bf7ef16b46d29fef962ca92a6e6b4aabb5dcd7

  • SSDEEP

    98304:2SfN44PXT7uyojhy2fHIvuEIedSWuS/sf0vAjFsnfhszBNGPRfg5:9vPTqyojkiHIvuwdhI1I8BIPBg5

Score
7/10

Malware Config

Targets

    • Target

      6dfb490d34058e5e8f42d327660afce2_JaffaCakes118

    • Size

      3.9MB

    • MD5

      6dfb490d34058e5e8f42d327660afce2

    • SHA1

      f777c539f2828fb1bff07e25b0d508124ddc75d6

    • SHA256

      8f3cfcedaf845387e4f7d07c77db62ad6f3c6856995ed8e0d1cdcecef17e0bbc

    • SHA512

      ff37d47fab5db4d7c5723451afbcdba8364b73824e0ecbd3343c8b6db22bdc22af709055a00678f15c3696f0d5bf7ef16b46d29fef962ca92a6e6b4aabb5dcd7

    • SSDEEP

      98304:2SfN44PXT7uyojhy2fHIvuEIedSWuS/sf0vAjFsnfhszBNGPRfg5:9vPTqyojkiHIvuwdhI1I8BIPBg5

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/DotNetChecker.dll

    • Size

      83KB

    • MD5

      e02ed575cffbc793af912c5541c7ffb3

    • SHA1

      1fd8f5ed9417b3804c1fbd18340eba4d09326f60

    • SHA256

      45e15d319084e019d4db5a3081533ba8c032308cf35384abf8b65ddbac6c5f9d

    • SHA512

      76804c9df7f97dc50ff375d1f1d972f2d20b57e2c543986a47de61fc2a0ec87225bc22d69ef31a37a12ecec46e477595184a964587ef469d6b0698cd71ebb5f8

    • SSDEEP

      1536:bg5jFZGXKkwO1V2+XDlM7IVNBNN4GS0CPrAm0dgKQUDs0OsWPIcdngsi9eJ:byCC7iN4rrPhKQngsi9eJ

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      8d5a5529462a9ba1ac068ee0502578c7

    • SHA1

      875e651e302ce0bfc8893f341cf19171fee25ea5

    • SHA256

      e625dcd0188594b1289891b64debddeb5159aca182b83a12675427b320bf7790

    • SHA512

      101da2c33f47bd85b8934318e0f0b72f820afc928a2a21e2c7823875e3a0e830f7c67f42b4c2f30596eaa073617790c89700c0d95b7949ec617e52800b61d462

    • SSDEEP

      192:W4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjAK72dwF7dBOne:3n3T5KdHCMRD/R1cOnrjA+BO

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      77ff758c10c66937de6d86c388aa431c

    • SHA1

      14bd5628eaf8a12b55cd38f9560c839cb21ce77a

    • SHA256

      6a033e367714ec0d13fca0589c165bdbf4d1dac459fa7ec7415815223fa3c008

    • SHA512

      319837951be276a179ead69efcd24bd7566061abc7997ea782af50bd4b0d69e5ec1a6e4cdeb2825bafedf87edf03380396b7bcf58682b6a3a824c8dc4b966bda

    • SSDEEP

      48:im18EhqneMPUptuMMNvimk2BAZuMTRCpYEvJdUJvR0J0of5dwe:F12pl9NLBAZuYtR0rd

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a95c7af96416b2cd084fed4c07c8c291

    • SHA1

      0c62c2fd843ccb59784404ed36369784dc557671

    • SHA256

      a1e09fb1739ef7557d18104b0d6a4c7725e1ec293f5404c80402f57ff9ebb9d0

    • SHA512

      427ef14b116b574c5558cc6bb0ce03ab37f891f2d7ab0f130e3cddd0265e6bd269c598ce93230e56cd41bb9d2649bbbaa2fa2c654d8116c0c6f79a6f3419d1dc

    • SSDEEP

      384:9ck76gi51kE5aYOMLDC4UnDp9B0Jc5HNw2NE:9ck76gibLCMLDLCx04HNVNE

    Score
    3/10
    behavioral10behavioral9

    • Target

      Help.chm

    • Size

      164KB

    • MD5

      9d5d6d3ab8624c3515da9659fe296eba

    • SHA1

      d3d45de89db0c36dd9772515e033b8bc080259bf

    • SHA256

      dbfc04b41642fd6e8115cdb7b0cf66688957bfbbac5e168e852f89e24dc1ac97

    • SHA512

      c89192788c2acf74a447b4f62dba3e3fe6fcf5b74eb89d6552de17da7618cece9c53a71314f3da546648b82eec50fd79b0222d107355f816661281ee1c447e5b

    • SSDEEP

      3072:XDTjx5SNI9t0W+P4TEzFRq8KnKLBAb0re98Awm29owi7RSFU:XDLucp+P4IzF5XPefzEcRSFU

    Score
    1/10
    behavioral11behavioral12

    • Target

      Right Click Enhancer.exe

    • Size

      830KB

    • MD5

      bd07d69edbc4779b65f837798cfce2d5

    • SHA1

      002a487831267ef2bfb6e4a312690ff3be1181e0

    • SHA256

      319433db5c3a38d2a5641fcb0e66874deb3b3eb8ec93ce5123bda06f77f165f5

    • SHA512

      2b0732d23a060e1e0a4c617c147027cbdaea235d383b830e99be93583c3dace0d98d2e32f7aff712715d9bfa9ff375863e158eb6b18fe162e828da7bb5fc5ad7

    • SSDEEP

      6144:Xl5nQMLV6yW76jThLN2haW6y8gGmycDC+yvqaSXKW7R57BOKHkss7aTuiz/wzT6W:XnQPd6jTdNs/QKtiiUz/

    Score
    1/10
    behavioral13behavioral14

    • Target

      Tools/File Types Editor/File Types Editor.exe

    • Size

      1.1MB

    • MD5

      9e9c42d75c0e30dd878ea8f232e559db

    • SHA1

      5083b9d004012a941542f0f86d67bd55efcceeea

    • SHA256

      42251a6f96751ec73c19138b735d1c9814c20dab977fe85d98a6b0bab80f907b

    • SHA512

      941b4ab8a156a1a27ecc3bfbfe24023d08218280485a7209c014f7b38e17d63cc5dc2ac0103920592bad3c3ae90f8179c62e47d52ccad606dcbf6cd03dc0304e

    • SSDEEP

      24576:8EHJDR4V9Jc+iObKmBgeSAZH4puTDgn+UVV:8EHJDR4VfH4puTDg/

    Score
    1/10
    behavioral15behavioral16

    • Target

      Tools/File Types Editor/Help.chm

    • Size

      162KB

    • MD5

      385d60edd25392f6afc14d1979241b25

    • SHA1

      36b7ddfaa647f0f6c79a32caaf84b7786f018f90

    • SHA256

      c6691730ca46310cc7c1aa9b4379e7c1764f606c61be3254af03d5be27f9c69c

    • SHA512

      f939e2f49ff1c341de43aa935c997784ca97062f9328439e0feccd3539be7c3188cea1c59461e4812c750a9d7df63f08e1a3631b0d30b6cfd9f7a9fc6a5ce312

    • SSDEEP

      3072:NvtNOPVxhCBjsN78TxIGAnkrmtfegVa84ljL9xsgzdzoCR1w:NvtNCxkDTHRrmTAsQMC8

    Score
    1/10
    behavioral17behavioral18

    • Target

      Tools/New Menu Editor/Help.chm

    • Size

      168KB

    • MD5

      77ad6ca4b703f022fb6096f0f7ae0ad9

    • SHA1

      a34981f2bfb33816cc8f425f36ea5bdd3cfeb3c5

    • SHA256

      65dfc7ba4cd5db52d8d4f63e1c6685f0fdd43595fa560b4beb4c4a07d7c1e1db

    • SHA512

      920004f44322aaf6a3d97f9afab10227adcf69feb4a0f0c88e6be6fe22669ddbbc29e9a42655ef2867deb5c3abbd927ff0bff8fef480acb676949308f994f408

    • SSDEEP

      3072:sFCyveCjs7lsQM+B4x5mf1vOWuBzIb1Q0dDNmovAeVtLO5+oQ1auHVl:YCOKRMrmtGb9cQymENjOW

    Score
    1/10
    behavioral19behavioral20

    • Target

      Tools/New Menu Editor/New Menu Editor.exe

    • Size

      1.1MB

    • MD5

      63996a1821aeddf598c459f2aa9a19c3

    • SHA1

      9d973f16cea3db6ddc0c60a24db0d036dfaff11d

    • SHA256

      929c9e89ca3b801b57abc5ba1eb772c4b6b971e85f0c3dc9c493912b9d383cf8

    • SHA512

      4505139aba129d7d79201f256c81def82d44056019d5d4ff8075ec6532c0d6215bd50a4b112cc439f08cd402c000606e5e2b560c640db75ffe870422236e7f2c

    • SSDEEP

      12288:R+FR3G4VF/ET0cbiiUz/bKmB2w0jecD33ybZH4puTDgn+XUKKFQ:YW4V9Jc+iObKmBgeSAZH4puTDgn+U8

    Score
    1/10
    behavioral21behavioral22

    • Target

      Tools/Right Click Editor IE/Help.chm

    • Size

      109KB

    • MD5

      55723df472318a44654d73f163bff087

    • SHA1

      8cb915024f48ea9a8f674d2f73487f54dba06bf7

    • SHA256

      b2989266a5aca45d6a3ace52e286448024f47760f07feaed4e7b299271786db6

    • SHA512

      40ba450a21a48136bc014a146426410ea98fb868db11a107cd2966326f0081ffc5733a8ae1f5706de4b6d3f8373cdcbf464ad6e5a3517670386a391d0bbadd24

    • SSDEEP

      3072:U7qYnaVtmXiZyur4ltYHj9O7NPbeDE6WNB4Lx65TAEIaFv+:U7qYnaCSZyuMYD9OJPbeD3WoLxsEEIa8

    Score
    1/10
    behavioral23behavioral24

    • Target

      Tools/Right Click Editor IE/Right Click Editor IE.exe

    • Size

      1.1MB

    • MD5

      290fe9e93925f973e50465bd696b60d1

    • SHA1

      765cd260fce3464e8ff95a9342ad0bcd54158d46

    • SHA256

      73c64885a3800984ce85f0a60133bd38461ac6753a453fd62b9f562dc7975b1d

    • SHA512

      f8ffc1d1f0a5edbe8449dd62b3c7145aa150cf47c2ac93d01475c81ad3454af88f64b3334b18e28acada17b492c8053867d527dd66d782e5eb2d6bd336c890bc

    • SSDEEP

      12288:cGrXG4VF/ET0cbiiUz/bKmB2w0jecD33ybZH4puTDgn+XULR:9i4V9Jc+iObKmBgeSAZH4puTDgn+ULR

    Score
    1/10
    behavioral25behavioral26

    • Target

      Tools/Right Click Tweaker/Help.chm

    • Size

      117KB

    • MD5

      3842738fbe94ebc79790c9a22f1fc9de

    • SHA1

      abb62c2904ac5a63ec16cd0471908e57106bd8a1

    • SHA256

      37b39c08d0083e61f4eb9bc58dbb252c146c664e41d78e2dc1b2f523ce0fc54d

    • SHA512

      31b0f49b6fd7e06fdb59f3eea0d6c468dbcae27ed0f35df8c24bf904302ad4f9abbf7e1221c957e2f3bb05491f76b590601037e2fc7dd0c07c0a96291a64051f

    • SSDEEP

      3072:I7ENboDV7DpLSsFP2H48OQFt737ObufcBomQqq/Iuu:I7ENbsVHHsRvL7OeZRu

    Score
    1/10
    behavioral27behavioral28

    • Target

      Tools/Right Click Tweaker/Right Click Tweaker.exe

    • Size

      1.0MB

    • MD5

      e8efed72e1fbd71060b9cedd25258a95

    • SHA1

      cad60b12dfb5a447d11f5e71a18c09573997fd75

    • SHA256

      a744667c5b3a741342e7caf7751fbabafa80b7c87f7a23a4993578cd2155b686

    • SHA512

      aad724fd6dab0fcbdf8a6ca736088529a92dd5a30d8552098ed4af1db5af26b353aa340bf300b670a100c7050a851ef88c5f0c0b1a338b4637929409511c6038

    • SSDEEP

      12288:O2TG4VF/ET0cbiiUz/bKmB2w0jecD33ybZH4puTDgn+XULyf:Od4V9Jc+iObKmBgeSAZH4puTDgn+UL8

    Score
    1/10
    behavioral29behavioral30

    • Target

      Tools/Right Click Tweaker/Tools/ContextConsole Shell Extension/CmdOpen_32.dll

    • Size

      15KB

    • MD5

      61044c0ad3d6dc42aa70caab6e00e1d1

    • SHA1

      4b744cf1436a326c314ccdcc5f7c024d375a8e9c

    • SHA256

      4aabf65aeff2ce7f74187f09a8299e9d7373eec567bb7f3c85719252abb35d6e

    • SHA512

      ae0100fb9e5463e678c2514fdd5f83fb0536e3817887db21bc07d46c0de8fd8e355834d5e54343c4be46c71e190166af7a627667c852e06e671e544770e73b4c

    • SSDEEP

      192:xkgip57uNoFe0JAP6mrwuhcF+DKO3W/HS+nnXWPJg8gCCGJBNZaAP3pS3hYUK2C:xPi37pFvWP6mjw+a/vXWPJGCRXrWvXC

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks