Overview

overview

7

Static

static

7

THEME file...so.dll

windows7-x64

1

THEME file...so.dll

windows10-2004-x64

1

THEME file...le.dll

windows7-x64

1

THEME file...le.dll

windows10-2004-x64

1

THEME file...le.dll

windows7-x64

1

THEME file...le.dll

windows10-2004-x64

1

transparen...cy.exe

windows7-x64

7

transparen...cy.exe

windows10-2004-x64

7

uxtheme pa...er.exe

windows7-x64

7

uxtheme pa...er.exe

windows10-2004-x64

7

$PLUGINSDIR/Aero.dll

windows7-x64

7

$PLUGINSDIR/Aero.dll

windows10-2004-x64

7

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...le.dll

windows7-x64

3

$PLUGINSDI...le.dll

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...on.dll

windows7-x64

3

$PLUGINSDI...on.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    849dd4e0cf0a57034e3ec855ed11b41f_JaffaCakes118

  • Size

    4.8MB

  • Sample

    240530-snnnyadh24

  • MD5

    849dd4e0cf0a57034e3ec855ed11b41f

  • SHA1

    0db7064134d4e6c7f94082ffec63a978ccf983a5

  • SHA256

    201d2e3454a2666f04cb212274de8e6d97a4630fd6a403023fcd963e89f63255

  • SHA512

    3336b14c3b726575dc19235f4d863c5e1fa378090203332c2c598c3384ac2c40e953945501a7921c3ea143ef17804c74dcb8234248440f55556d3d08e3aec5c7

  • SSDEEP

    98304:qQp8pLb7GUPbE7Tu/KANWb1Vu+vHYTp8MifToIYbW8eh8Xg/A:qQp8VWkE7eKANWLvHYTppgT5Y8hy9

Score
7/10
upx

Malware Config

Targets

    • Target

      THEME files/Abisso/Abisso.msstyles

    • Size

      801KB

    • MD5

      38dad9f9770721b7fc01bee9760837a8

    • SHA1

      289316981143b598743c014827bc638bff1912b1

    • SHA256

      145873a0782dc4bd116a5037f3f6d250bb86b4f4fc1de6dc289352f5f81a3ecc

    • SHA512

      d19aa3fdaeab8f3bfffa00a8f1c4d96c68dcf9a2e10692eb17059fc7431423f8f0aa97783e076d52b39f6138b29472e5c3d77c32245ef46c4bd21f8b2dedc024

    • SSDEEP

      12288:epR/7kn+Aio7YzWeFddddddddddddddddddddpPGZ1J+kPCEKhESde+Re:uB/POJ+KCEaESE

    Score
    1/10
    behavioral1behavioral2

    • Target

      THEME files/Abisso/shell/NormalColor/en-US/shellstyle.dll.mui

    • Size

      120KB

    • MD5

      8eac59bd66c86c9f0c76dd7e6258d330

    • SHA1

      9103a6486a4a4de1ebf722fdde83c970a2c691be

    • SHA256

      1e61f576a83696abd1fc1e1406f36f7c6cfb8a581bc4c518af3e4d0bf03d73fa

    • SHA512

      1eb8852d1e8e58b174e9444c1b99e29903e26594abe8fb2fb2f917cf8853f3fc5ee30b0a1d9013bf53fe1a5384cddc922d2fdba8ae73e6bc5a673d004fb146e1

    • SSDEEP

      1536:DXXo21vTvg8K8t6wMe2CXmQCd3PFCt888og+ZpMYJGoT:DX5VKQwe2qBCH+sYfT

    Score
    1/10
    behavioral3behavioral4

    • Target

      THEME files/Abisso/shell/NormalColor/shellstyle.dll

    • Size

      345KB

    • MD5

      50e056c0031132e5afb34a30f75ee688

    • SHA1

      6d3de5c0104adc811f7618d7cadd3089df42e6a1

    • SHA256

      b6d44ba93da58b2f20aaf0c7d78c93ef4f3715345ca8bc8fd65f51d6176901a4

    • SHA512

      071a98f878d56d18939977bdb55fd3a70f77312e094717ddb8ffbbd38c555513f4e6792a6d58688671fd9e9f220883682a50f4fd86b20ba87a71b1ef9c1283e0

    • SSDEEP

      6144:/+EvP+Ev7+Evy+Ef+EvR+Evc+EvONZN/Nt/cb9cChIJ:u/cb9cV

    Score
    1/10
    behavioral5behavioral6

    • Target

      transparency for all windows and popups/transparency/System Transparency.ex_

    • Size

      231KB

    • MD5

      47f618f5667a37292e57bcdfb3794f19

    • SHA1

      47fb8f3e1578075cfae8886f8c41c308bdc63f19

    • SHA256

      ef4d34e632e48b7ab64d0fe196e36952e3c56815280940c1df01c95902b85733

    • SHA512

      6df12f282e965a1ddae9c5ed59908b667249eae52af27fdc30fc967e9e9109c3456d46a1aea96971d0577986ccb82a78436ffdec63a3b740794dab4194d7493b

    • SSDEEP

      6144:OZC4d3lbxc6wU/UP+XhdMRFD3LAwektNtoSk6P:34dMRU/UP4heFjLDFtNtoSP

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8

    • Target

      uxtheme patch/UltraUXThemePatcher.ex_

    • Size

      155KB

    • MD5

      3156c1dfc05cb509aad5cc94a77511ee

    • SHA1

      e9be935ea42141277d618e02f49fb77df56d7279

    • SHA256

      602fa4344d7fdb830e6c0f8b1f94c38fae71adf75a194bd6e86028d849677744

    • SHA512

      e043ce7e2a84d960632abd9abc56baa8b749cb75951ad655620c660583a9dbcadf0b8d73f5ea83a505cedd41a5ce2ffe760375836844fac2ec85d3d1897a07d0

    • SSDEEP

      3072:WQIURTXJ6stVm12xqQzIQsAYG33xb6nCaPpVti4pfUtcT1Gt+4:WsdtEgxn2ngxb6nCaPpVtiCcMI3

    Score
    7/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/Aero.dll

    • Size

      6KB

    • MD5

      243bf44688b131c3171f2827a93e39dc

    • SHA1

      07e9c7bd16ae47953e42c06ae2606de188386f35

    • SHA256

      04a577df50431eb0ff6fb103566402bf66c50415bcc1f8a86b9c235053131455

    • SHA512

      a1a8c21d38c54a43d1c6c394f481dfbddcb359c617e9928ecca8f84d47354616a78d20735a1fe7bebd21626c21cf96d0e1a69e3e98f6b35f2a774cc0244f9516

    • SSDEEP

      96:Mh1Wh+rTUNfwRtoqLOk+UVud5Wa7U2ZG:MTWh+cZG2qLOkjud5Waw2Z

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/GetVersion.dll

    • Size

      9KB

    • MD5

      225f776172f1baccd2721a6e5d512b36

    • SHA1

      2dbbc86f7b0285682880a627b56a75de09f4bed6

    • SHA256

      ecfcbe30f5b248673f9cbebb734b9981ed14b06380ea787c563d67b30e2d069e

    • SHA512

      4b99a5ac68122501a5913cf54bd3ae99d851d57656b0e136980122739cceef739fa2d5ea097f2442068b9489a4c25ea0884653c41d85f27f25996792bf6c21bb

    • SSDEEP

      192:MMr/9XGqK7s/AlHdJZBi46AQ5VuNxHA8/:MsXGqM93Bi46AQ5Vujg8/

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/nsisFile.dll

    • Size

      5KB

    • MD5

      a35adabef191a1d5870096543ffc18ec

    • SHA1

      76a77d50b8f0be5a77fdb7b71a661a356ead1b7f

    • SHA256

      bb5be80416d8e381fbcb0f03ea3433d94a75786e3842e8cfe1b7b8bd57354457

    • SHA512

      97eb8186abc0ae5a6c1858b78042c41fa377dea33ea0bae3c6957b7a22486ba0f1e0a4a43d817627bbba85d5de786c82e05d7505dc7df62bff51439fd0f8401c

    • SSDEEP

      96:DBcvub8wwAwqr70/oGNh6e31JTLTNFh9552Qs:dcvm8wZw0L4h6e3PTLTB9552T

    Score
    3/10
    behavioral19behavioral20

    • Target

      Uninstall.exe

    • Size

      96KB

    • MD5

      1b48e1d5d2a00a916c7df2f7abbd2713

    • SHA1

      4a052f97b760fa2db89974069cbce2d3cb0d560a

    • SHA256

      589dd07c5163c550e794000a67638d52ecf86477976527052fc99304aa74a46b

    • SHA512

      d3dd85a74f4455266f8ac055c5f31c51fbba7fa6525a4eac0040676acc22fcab1d4fcf636c191521790afd2a7059a89f855a5081926f2ae994532e442501997b

    • SSDEEP

      1536:WQpQ5EP0ijnRTXJNe5wP7+VCusaarmj8ZNF4a1OCWMSF5I7GcqRh:WQIURTXJ6stVmkOd8p8

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral21behavioral22

    • Target

      $PLUGINSDIR/GetVersion.dll

    • Size

      9KB

    • MD5

      225f776172f1baccd2721a6e5d512b36

    • SHA1

      2dbbc86f7b0285682880a627b56a75de09f4bed6

    • SHA256

      ecfcbe30f5b248673f9cbebb734b9981ed14b06380ea787c563d67b30e2d069e

    • SHA512

      4b99a5ac68122501a5913cf54bd3ae99d851d57656b0e136980122739cceef739fa2d5ea097f2442068b9489a4c25ea0884653c41d85f27f25996792bf6c21bb

    • SSDEEP

      192:MMr/9XGqK7s/AlHdJZBi46AQ5VuNxHA8/:MsXGqM93Bi46AQ5Vujg8/

    Score
    3/10
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral27behavioral28

MITRE ATT&CK Enterprise v15

Tasks