General

  • Target

    a7a8bff507d3aa5f382e68cd344e589c_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240614-cfrgvs1eke

  • MD5

    a7a8bff507d3aa5f382e68cd344e589c

  • SHA1

    87e22e8b9200d178b00c8d7fc5437fac7b7eb7eb

  • SHA256

    33659d416ece94d089ac3aa73302d73f30944b4cd299506b215990b8dfe8a41e

  • SHA512

    e556be94a29c5378e6e453bec75bf9422e41572787d2466165259164b2c2baf5e3d301e9b6ea57379f205aa87bec52c986f211b7aae20651d5c844f435a41a7e

  • SSDEEP

    24576:tIDAIdEYf1+vXI4lzkrAja9l890udp1h+5UJWI9qPfe3gZrPVZdJb+9tbV/x6o:tjAmI4NkrAjco06p1EUSPfY69N+9tbN

Score
7/10

Malware Config

Targets

    • Target

      a7a8bff507d3aa5f382e68cd344e589c_JaffaCakes118

    • Size

      1.5MB

    • MD5

      a7a8bff507d3aa5f382e68cd344e589c

    • SHA1

      87e22e8b9200d178b00c8d7fc5437fac7b7eb7eb

    • SHA256

      33659d416ece94d089ac3aa73302d73f30944b4cd299506b215990b8dfe8a41e

    • SHA512

      e556be94a29c5378e6e453bec75bf9422e41572787d2466165259164b2c2baf5e3d301e9b6ea57379f205aa87bec52c986f211b7aae20651d5c844f435a41a7e

    • SSDEEP

      24576:tIDAIdEYf1+vXI4lzkrAja9l890udp1h+5UJWI9qPfe3gZrPVZdJb+9tbV/x6o:tjAmI4NkrAjco06p1EUSPfY69N+9tbN

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      18KB

    • MD5

      adec63bd08a185bffe6fda335d29df87

    • SHA1

      23f37d31f3b1c07547ad4fa2747305a04ac09b54

    • SHA256

      dbd0068d46077ee1ace4eaafc3312389c29af22d306c5757a1a29a93146604a9

    • SHA512

      44bb32fa41b0c2b41d637f15dd2cab84ad6f9dae39febb263923eeee19d1c80d65ba3939ab87d34fbb28af6a6f867c21daab5810d289e309451c67ef6f65a88c

    • SSDEEP

      384:LPs/sv/Qji4uGGAjc6GKv3WRg0DXRpLJXCYAkF3cuzFNS:LPdEipAmbhX1cu

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      23KB

    • MD5

      125aebb055446fb52aa5956cf99e8a9a

    • SHA1

      6b58fd08a8ff2763219cc6b0dcdb875f9970f850

    • SHA256

      2e1b11ee20e5061ea86dc6b01e3efc659e887540afcab7317cdfd6a8eff87ec3

    • SHA512

      5f85e48bd3ae2fd2be0595b93cbf74674e0281210688dcc73691178b295a702e8d43898afb6e5d8b7e82de98b4ee28194c9838ddf8279cde85f7fe48d34dc8b7

    • SSDEEP

      384:7AQ5GjarYFU76ffyEIPb9p206QrHwIl8ToknCLJy4k9KyFkKCKWin/aY+:72XixPbPD6gQikUywWkKx/aY+

    Score
    3/10
    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      6KB

    • MD5

      7f780de67db61a924bebc0cafaded3ad

    • SHA1

      3ac359dce08ceff16e4214fe45d83fdc8e3f2e1a

    • SHA256

      9931a2f8bb44b92ff26062b99cbb6e41ed1cfad65079dec5d6d9c006223bd121

    • SHA512

      8378f04b6f5085e887ed46874414e5681f0ecb6889dbaa25eb78f75112d4be603aef8dec6a2a81857a19978f6ccf07d65d566ff3f0943da809de22599ffdd8f2

    • SSDEEP

      48:6qX08pwehWTmk61T+8tH1GNO/icjsgnFp8hKAYKFaLDzzDz/xRe2v1e:GkwehWn6086+sgnchKAYKFafzf60

    Score
    3/10
    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    • Target

      $TEMP/tap-windows.exe

    • Size

      227KB

    • MD5

      3f314ac56b51b7889d2592169934a47f

    • SHA1

      dc2ddcbd86be5cad3e5faa8d80642b1e3cb3c4a7

    • SHA256

      3ec994b193be5155a17ec2d7d36274b64663c017e6dfdbcd8dc046d99388a964

    • SHA512

      621bb168c37f1031d0650d35a7573310e64198494bf108717af1da67e9dad683dde287bc8bdbfe2a9b037e305bfde76aae4e0a8e67ed6fec5874cda8041b72ff

    • SSDEEP

      3072:rLk395hYXJOypKDKG/nuMJqcGYUVBh0ycoDrHoMACUntGdbTmb2NYeBnuMJqc:rQq+DpuMypBh0yXrHoZtGd/mCNDtuM

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      7579ade7ae1747a31960a228ce02e666

    • SHA1

      8ec8571a296737e819dcf86353a43fcf8ec63351

    • SHA256

      564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5

    • SHA512

      a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b

    Score
    3/10
    • Target

      bin/devcon.exe

    • Size

      80KB

    • MD5

      3904d0698962e09da946046020cbcb17

    • SHA1

      edae098e7e8452ca6c125cf6362dda3f4d78f0ae

    • SHA256

      a51e25acc489948b31b1384e1dc29518d19b421d6bc0ced90587128899275289

    • SHA512

      c24ab680981d8d6db042b52b7b5c5e92078df83650cad798874fc09ce8c8a25462e1b69340083f4bcad20d67068668abcfa8097e549cfa5ad4f1ee6a235d6eea

    • SSDEEP

      1536:MP2K0pa0WfEYp9Y/XQhpgnbP212YCJpDhiF4O7W:MePOYe4bu1epDh8RW

    Score
    1/10
    • Target

      driver/tap0901.sys

    • Size

      35KB

    • MD5

      2c1686795b9307265f649249ad11d629

    • SHA1

      6e5bea0b56b19e88a409ed583f032ea927ce51ac

    • SHA256

      51e4cfa39995b155724cfc9af45b83f674f300907b2a405f003ae09e7c6f6e1a

    • SHA512

      85dbff96c6606de82a1bc31a027cb440ddc297f1a9d0dcbcc3fa51a20d1441e1800b4a0084374b2071c300f3716c49697a55fae493fb6f4a2b0cad10e674efd8

    • SSDEEP

      768:3IOPCr6ghD8JTbNdDChKCfl4FUFqa0XFC1bRbq0FlCbNSjhFux2Y/:4cCr6gYTbPDoRfi60a0XFC1UPQjhFuxf

    Score
    1/10
    • Target

      bin/libeay32.dll

    • Size

      1.4MB

    • MD5

      a9cf36dd2d2e8df43ca312455ca615f7

    • SHA1

      20b33e7f51f01f4100135b3d6c35cf20a97bac47

    • SHA256

      da02dd7167894a575901682a1a6377b745365f42e81b8070a5ee6b1e8b5f6f58

    • SHA512

      10f56e6592ceb0b57157524ebd45e5a93534f0f190a5cd35094c98032cb01d08452c7cab17e6d2e408b5cf73b3dc0c53c081ebb42954c5e384a122e4d9d70c42

    • SSDEEP

      24576:3KaTX+57PID/ISB5a7rFxPav5AOZpanhS4DpRQzURi0mx/T4Jt71mkp4:3BQtSB4nFxZOXEMzUg0mx/cJV1mkp4

    Score
    1/10
    • Target

      bin/liblzo2-2.dll

    • Size

      155KB

    • MD5

      d6a5d253b9d221a25d8c5e246e823901

    • SHA1

      03ebd28340b858c3145b269c7aec3e1e63a33641

    • SHA256

      2d8c5b8b32eaf03f0848cae650f3b96533b861b5d3547f8470e76aa162dae3c6

    • SHA512

      f60920661e0384e3e29b9e580f0bbfb6bd17821bef4cda04aa9f5a333d2f773a96377f29c1cf55b26e17680bf3bcd1d3d25910efb2fd0f989485e5f91cd50ae7

    • SSDEEP

      3072:CZ7PaJFwq0s0+jTnFyO6clq2OlZRpImweG9k9G919503DnP59Cu3PnPC7Glsu13:nwq0WaclEWWsu13

    Score
    1/10
    • Target

      bin/libpkcs11-helper-1.dll

    • Size

      102KB

    • MD5

      b9ca2d5962fff8ad8f58d86759bb6933

    • SHA1

      f1b5d23bcf2290817f228795e44cc82c0ba90955

    • SHA256

      0ff4fb3c39b95f12dbe3a9ce97bd820751321edc0afcc424521a28fea033ac73

    • SHA512

      3c12cecdb33f12b38cda688ad71b8df3f257a735792848ae62296bd19268a628efbe998a0ba04420a4c99f8570bc13105da5c924345502977b14fdcb859b1e64

    • SSDEEP

      3072:BjZE7WPMer+oB9+UsnUS/5Dxh9QQU7kVTAHluobjrmBbZmkY7:vPMepUnUS/5Dxh9QQU7kVTAHluobjrmq

    Score
    3/10
    • Target

      bin/openssl.exe

    • Size

      790KB

    • MD5

      ebc63cb1a0c0eecd8052b3b3c3d2b9c8

    • SHA1

      8248848dc11a7c098a211bfde66590501da1b360

    • SHA256

      2406a6040db85e202f482aac43926743808880371cfe3213e70a7a2b9a712e77

    • SHA512

      adb2aabde6e906557ac5755affa29e0d0e4b9711a97791f607af021e8a5f5510283403da5ec0a1d0e98710b0ff9ba8d8e3f49b8fe795d7fbb92cf7e9a34129ec

    • SSDEEP

      12288:tpJqJ/PizLFq3PCBwgBxvOnG2C2ug9W6TrkO9BF:tpw1izLFq3KBXBUnGL2r9gwBF

    Score
    1/10
    • Target

      bin/openvpn-gui.exe

    • Size

      363KB

    • MD5

      c048a4774d7b59e13cbdd59d7e3710ae

    • SHA1

      b3ee103be1e68815246efab6b91046b81eb48a4d

    • SHA256

      34574be4b68e3c8b99e1b4a5ed03ec23972c35a9141a5d999f36a0ffb65d65b7

    • SHA512

      da24d47c68eb753518ee3e1446c3d7ae086475ce94a619ca32a334a09c984d43d1261520453920a3c162ce8cf7a207eedf7ad2dae97ee03505b0f10ebe509f64

    • SSDEEP

      3072:5mn+FKXycgwmDaojFFz4aA29XB2y3pDyn8Tt2anuUeVvsMN2z/spzgkhFjp4e0bh:uGHFz4arDXK/vHdNu

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks