163649231f5422ad974ff6edb760b3eac67c17c15440e4dd4d286b54b87e9567

Sharing

Copy URL Twitter E-mail

General

Target
7b013a3308489cbabb6964a744bc70ee_JaffaCakes118
Size 130KB
Sample240528-aahxesgb23
SHA256 163649231f5422ad974ff6edb760b3eac67c17c15440e4dd4d286b54b87e9567
MD5 7b013a3308489cbabb6964a744bc70ee
SHA1 7ca649f902dd834132eec0d5562cfefc01682a14
SHA512 1faf5f785a03f3417027e5dba658f57c2b3b9f237ca7ad7ce2258ca3717f48ae89b4ac3632a3d250ac1c250da6858875bba25b34be84aaaea8987233620eab33
SSDEEP 3072:fQIURTXJ5Wftg7r/TznRcM4zLp2Px4parR4wXi5:fsTWfy3RcM4fpi0aV7c
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery

Malware Config

Targets

- Target
  7b013a3308489cbabb6964a744bc70ee_JaffaCakes118
- Size 130KB
- SHA256 163649231f5422ad974ff6edb760b3eac67c17c15440e4dd4d286b54b87e9567
- MD5 7b013a3308489cbabb6964a744bc70ee
- SHA1 7ca649f902dd834132eec0d5562cfefc01682a14
- SHA512 1faf5f785a03f3417027e5dba658f57c2b3b9f237ca7ad7ce2258ca3717f48ae89b4ac3632a3d250ac1c250da6858875bba25b34be84aaaea8987233620eab33
- SSDEEP 3072:fQIURTXJ5Wftg7r/TznRcM4zLp2Px4parR4wXi5:fsTWfy3RcM4fpi0aV7c
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/ExecCmd.dll
- Size 4KB
- SHA256 1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
- MD5 b9380b0bea8854fd9f93cc1fda0dfeac
- SHA1 edb8d58074e098f7b5f0d158abedc7fc53638618
- SHA512 45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
- SSDEEP 48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/Inetc.dll
- Size 20KB
- SHA256 6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
- MD5 50fdadda3e993688401f6f1108fabdb4
- SHA1 04a9ae55d0fb726be49809582cea41d75bf22a9a
- SHA512 e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8
- SSDEEP 384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 14KB
- SHA256 fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28
- MD5 254f13dfd61c5b7d2119eb2550491e1d
- SHA1 5083f6804ee3475f3698ab9e68611b0128e22fd6
- SHA512 fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7
- SSDEEP 192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- MD5 00a0194c20ee912257df53bfe258ee4a
- SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
- MD5 05450face243b3a7472407b999b03a72
- SHA1 ffd88af2e338ae606c444390f7eaaf5f4aef2cd9
- SHA512 f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b
- MD5 SHA1 SHA512
Score

3^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12