Overview

overview

7

Static

static

3

70b512ac63...18.exe

windows7-x64

7

70b512ac63...18.exe

windows10-2004-x64

7

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

$PLUGINSDIR/ohrqm.dll

windows7-x64

1

$PLUGINSDIR/ohrqm.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    70b512ac63e78e403e2e365ca5d5bb29_JaffaCakes118

  • Size

    558KB

  • Sample

    240525-dxqsbscg5x

  • MD5

    70b512ac63e78e403e2e365ca5d5bb29

  • SHA1

    9e72b057cba4aefea4dd56b502c438e0abaabf10

  • SHA256

    12379ca99f9ff1657f0f3d71bfc2f33e86a295350adad74a134d972c13d23bc7

  • SHA512

    bbf0cd1656577fbf7df79e520e17d9ed15a5ae64b519950f51a774318e629ced2ff768d3d14ec77829791088cd09515f50e795295c5aa79dd2e74cfc505e057c

  • SSDEEP

    12288:IWnzzjfw82haL1H1R/fwZsCMTwCpUVY+YXQ9ZajhF3aPQ:IWTYW1HXX7HyYgaF3f

Score
7/10

Malware Config

Targets

    • Target

      70b512ac63e78e403e2e365ca5d5bb29_JaffaCakes118

    • Size

      558KB

    • MD5

      70b512ac63e78e403e2e365ca5d5bb29

    • SHA1

      9e72b057cba4aefea4dd56b502c438e0abaabf10

    • SHA256

      12379ca99f9ff1657f0f3d71bfc2f33e86a295350adad74a134d972c13d23bc7

    • SHA512

      bbf0cd1656577fbf7df79e520e17d9ed15a5ae64b519950f51a774318e629ced2ff768d3d14ec77829791088cd09515f50e795295c5aa79dd2e74cfc505e057c

    • SSDEEP

      12288:IWnzzjfw82haL1H1R/fwZsCMTwCpUVY+YXQ9ZajhF3aPQ:IWTYW1HXX7HyYgaF3f

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/ohrqm.dll

    • Size

      125KB

    • MD5

      86af267cdf174da8e5a6324da69db6f2

    • SHA1

      0c77d15d942b305e9138e25eaf98bccce87f7c00

    • SHA256

      67495aff30fceb48b8e7a86fdb1ef30a0e824994fdcea7cf6a10e875b8bf7a53

    • SHA512

      ddd231fc623a0b27a55b601fc153e9e08c4af27576c952dd28878880fc12f6460fbe1f569c5c54edf37d3715ccc94534dba32a949a20eac538b2fe2a852214ba

    • SSDEEP

      1536:yxGklCTTsy14Oo1Pfz/gecf1hkj0O0CFpyUuHj40Yuz8AJTnnrBhJppPWnkqXDXy:0Cfsf9fzIn1kHfYx4RAJT1ppPqXD+j

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks