Overview

overview

7

Static

static

3

afc5f9a700...18.exe

windows7-x64

7

afc5f9a700...18.exe

windows10-2004-x64

7

$PLUGINSDIR/7za.exe

windows7-x64

1

$PLUGINSDIR/7za.exe

windows10-2004-x64

1

$PLUGINSDI...G].exe

windows7-x64

1

$PLUGINSDI...G].exe

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afc5f9a7002c92fb1e43f9d53eb331b9_JaffaCakes118

  • Size

    420KB

  • Sample

    240615-w3g2gsthpl

  • MD5

    afc5f9a7002c92fb1e43f9d53eb331b9

  • SHA1

    d368f7382a19f98cf9fb9fc82a36650d62fc3541

  • SHA256

    ad54721da98ddf691beab79a74f1d3477fa6548e7b3d7ea193347a59923ca5a6

  • SHA512

    32bed77d12ab2398ca4cac791bcececc03da4807ccc0a983c65cc3309715e6398e81e53dc2864362306c6c046cbf82918e01fb71ebbc71197f67da848f417b6f

  • SSDEEP

    6144:OsxFfVLuRRH6+AO9W+0qFIzQcpy2Ox/vrlpLBXEKYs/DtZ6aqaRjwGJiuwn/RKH0:TF9LuRRHGVuIz3UbtXcutZ6kxJiua/Z

Score
7/10

Malware Config

Targets

    • Target

      afc5f9a7002c92fb1e43f9d53eb331b9_JaffaCakes118

    • Size

      420KB

    • MD5

      afc5f9a7002c92fb1e43f9d53eb331b9

    • SHA1

      d368f7382a19f98cf9fb9fc82a36650d62fc3541

    • SHA256

      ad54721da98ddf691beab79a74f1d3477fa6548e7b3d7ea193347a59923ca5a6

    • SHA512

      32bed77d12ab2398ca4cac791bcececc03da4807ccc0a983c65cc3309715e6398e81e53dc2864362306c6c046cbf82918e01fb71ebbc71197f67da848f417b6f

    • SSDEEP

      6144:OsxFfVLuRRH6+AO9W+0qFIzQcpy2Ox/vrlpLBXEKYs/DtZ6aqaRjwGJiuwn/RKH0:TF9LuRRHGVuIz3UbtXcutZ6kxJiua/Z

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/7za.exe

    • Size

      574KB

    • MD5

      42badc1d2f03a8b1e4875740d3d49336

    • SHA1

      cee178da1fb05f99af7a3547093122893bd1eb46

    • SHA256

      c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf

    • SHA512

      6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c

    • SSDEEP

      12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/[RANDOM_STRING].7z

    • Size

      225KB

    • MD5

      51e7fc25a21d41eb4aecd396def37833

    • SHA1

      bcfe392981c691ee3071ee98a7fb98dc54903175

    • SHA256

      ce2dbcc3f203c696b79c67fa23b03f47548a9c8ce5bf912518e4dcde7d83823f

    • SHA512

      becfc1965b20f12c3503762f4818b87153722a59bab01b5942151899b077fedfb9a5b0e93e8ad4fbda67d0c501b845eba9680c84c951b0a8ad024407e1b2d2e9

    • SSDEEP

      6144:3Lbii5bkgVuN+xSKV7Wkrsf7LshQVtcU+CiDEfYZ+2:3XikbkgaISKV2VtcU+CiUYU2

    Score
    1/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      acc2b699edfea5bf5aae45aba3a41e96

    • SHA1

      d2accf4d494e43ceb2cff69abe4dd17147d29cc2

    • SHA256

      168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

    • SHA512

      e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

    • SSDEEP

      96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX

    Score
    3/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks