Overview

overview

7

Static

static

3

808365819f...18.exe

windows7-x64

7

808365819f...18.exe

windows10-2004-x64

7

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/lzma.exe

windows7-x64

1

$PLUGINSDIR/lzma.exe

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    808365819f227c657baecc19e34f1bc3_JaffaCakes118

  • Size

    231KB

  • Sample

    240529-m32lfsda49

  • MD5

    808365819f227c657baecc19e34f1bc3

  • SHA1

    5126a9d622153c017daef71bb64eb83c3f1acc5d

  • SHA256

    13bfb7b27de995dbad244c3c79485ca74431efbfe77a62b15d0480840b6ea915

  • SHA512

    d4d4e6470c8c199e1112ac1a85777f140932a5901a7c0db3d0d403ed2be2c7de4d31018573670401a2552f6c93715650d0ff22be9b3268a7e77c481988ce3149

  • SSDEEP

    3072:MhizgwyT3BJQ0o5GlZMY0B/UkoLJ8S5LD7eC7RCkgGTCPaq0hlF79XlnMb4+/L9Z:4J380o5GMY0Zq8SMCAYp57i4+/1jgAPZ

Score
7/10

Malware Config

Targets

    • Target

      808365819f227c657baecc19e34f1bc3_JaffaCakes118

    • Size

      231KB

    • MD5

      808365819f227c657baecc19e34f1bc3

    • SHA1

      5126a9d622153c017daef71bb64eb83c3f1acc5d

    • SHA256

      13bfb7b27de995dbad244c3c79485ca74431efbfe77a62b15d0480840b6ea915

    • SHA512

      d4d4e6470c8c199e1112ac1a85777f140932a5901a7c0db3d0d403ed2be2c7de4d31018573670401a2552f6c93715650d0ff22be9b3268a7e77c481988ce3149

    • SSDEEP

      3072:MhizgwyT3BJQ0o5GlZMY0B/UkoLJ8S5LD7eC7RCkgGTCPaq0hlF79XlnMb4+/L9Z:4J380o5GMY0Zq8SMCAYp57i4+/1jgAPZ

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/DcryptDll.dll

    • Size

      14KB

    • MD5

      904beebec2790ee2ca0c90fc448ac7e0

    • SHA1

      40fabf1eb0a3b7168351c4514c5288216cb1566d

    • SHA256

      f730d9385bf72eac5d579bcf1f7e4330f1d239ca1054d4ead48e9e363d9f4222

    • SHA512

      8bdbbaaf73e396cf9fd9866b3e824b7e70c59a2bdefdb3236387e60d0e645d011265fe79fb193f6c0d6abe2e9c01260720c71cd8f068fcc4624760511c54efaa

    • SSDEEP

      192:apY9VuCnNCbs8dNyHdrvr5T1KEtx/9ehuhiDTUkSv/DxRyeHk51I7n13Xm:aptMNUjyVvGWxauhiDDS3DnyK7nF

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      15KB

    • MD5

      c960b98cdd096697c00aa2b96279d970

    • SHA1

      a53afa835e0a0357e8feb66a7018721fca12907b

    • SHA256

      9173a0d2b1554b63f0171379919f961cbe0d4bf80200dd7f0ec5679142911865

    • SHA512

      23f36ee9c4fc22fcd4c9db24a482570690583017f4db2f2216d999ee1ebdf4a819b6d925e53b1d8ecc280f093578beba5ff8515a4c02aeb39643fd7044a04649

    • SSDEEP

      384:gYqY8Y/KWSPYYI+G/7d3kUY9yNxtsn99xL:bqPXI+GB29yNxE9

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/lzma.exe

    • Size

      71KB

    • MD5

      71dc11c495355f883498ff5e8702bb3d

    • SHA1

      9685190619088991a89ab6b96f8595453bb7f795

    • SHA256

      f16b39ef342323d997b2cc9b649a94b6ebd12954671f357d1ed690bd7eb5ba7f

    • SHA512

      3551706f1faf912944a0412c72f31510ea58fe5a60449141f7945d80f9b1f3018eced1ef82033405943c78d707a77ced0045c9217f5737ae1dfd5c1e239665ea

    • SSDEEP

      1536:L4iIoFd/iQuGIpJrnuRctWN5UbhYLEnCwaXEY1:L4iICd/iHVrnuGtmUBgXE0

    Score
    1/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      b8be6632a7dc8136ff01338be40fe701

    • SHA1

      043fa16929b2af5ed5c1c59b4035a10cf765fb43

    • SHA256

      289786fe13801467653eb2712f47f162d6fd3fc2d844be342282f75fc2b2a085

    • SHA512

      403474154ff8500e5aae2b4466c652e5d066af2c55d8f158e6f007492ceb1f3abcc6cca80842b90900db02db4258ddcda75dec1d1799af24969c35811891e5b8

    • SSDEEP

      96:ovkNRhdXhG0CzpC6dsiFam4C026ebZT4MJlWD+RfEqL5Q4hTUVKJx3/:9Nnd9Cz86GVSmua+2qL5Q4h4VSp

    Score
    3/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks