Overview

overview

4

Static

static

3

bd68e020d7...18.exe

windows7-x64

4

bd68e020d7...18.exe

windows10-2004-x64

4

$PLUGINSDI...ew.dll

windows7-x64

3

$PLUGINSDI...ew.dll

windows10-2004-x64

3

$PLUGINSDI...is.dll

windows7-x64

3

$PLUGINSDI...is.dll

windows10-2004-x64

3

$PLUGINSDI...ay.dll

windows7-x64

3

$PLUGINSDI...ay.dll

windows10-2004-x64

3

$PLUGINSDI...nk.dll

windows7-x64

3

$PLUGINSDI...nk.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

1

$PLUGINSDIR/inetc.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$TEMP/kwun...er.exe

windows7-x64

3

$TEMP/kwun...er.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd68e020d796278d3683f75a0d76f52d_JaffaCakes118

  • Size

    858KB

  • Sample

    240619-vlghysvare

  • MD5

    bd68e020d796278d3683f75a0d76f52d

  • SHA1

    7645095d4e50a9484f640347e3a6e3f0d53ec1d5

  • SHA256

    c55732168517ea7a91d294844d2e32da201bb31e95ec484f68f29fa5efb5e08b

  • SHA512

    558bc4ecad5fed3d4527a26fd021232248e5147b8c19a798b510c33f1126604f32e5bb590b1ca4ec564fb8aec18d282a2272519563534a9bfe8734e14c9faeef

  • SSDEEP

    12288:g1HZBFqMkpHzHzmHdFFagEEDC111RmqmqmqmNXAXAXAEBYYAoVHzHacsimn75jRL:gZc75jRrLN2fnTaKRnw4i5EAaQd

Score
4/10

Malware Config

Targets

    • Target

      bd68e020d796278d3683f75a0d76f52d_JaffaCakes118

    • Size

      858KB

    • MD5

      bd68e020d796278d3683f75a0d76f52d

    • SHA1

      7645095d4e50a9484f640347e3a6e3f0d53ec1d5

    • SHA256

      c55732168517ea7a91d294844d2e32da201bb31e95ec484f68f29fa5efb5e08b

    • SHA512

      558bc4ecad5fed3d4527a26fd021232248e5147b8c19a798b510c33f1126604f32e5bb590b1ca4ec564fb8aec18d282a2272519563534a9bfe8734e14c9faeef

    • SSDEEP

      12288:g1HZBFqMkpHzHzmHdFFagEEDC111RmqmqmqmNXAXAXAEBYYAoVHzHacsimn75jRL:gZc75jRrLN2fnTaKRnw4i5EAaQd

    Score
    4/10
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KuWoNsis_new.dll

    • Size

      298KB

    • MD5

      82f572276aff5f06f55240323ad8d267

    • SHA1

      0eeef4b8aa4787a3912522187855c8c0743bbca5

    • SHA256

      5f901e526effe89e783eb4acfdec0f485a465a98b9069d0b13ffd5e2ed73adfe

    • SHA512

      b29a1faa150dbe70b2cffccb233d25548c812a2f773e031b76d9de314bc33ad4dad69b821f315535dc0afdcf0e6e5749d6487ff9eecac927999b93906ec15c0b

    • SSDEEP

      3072:rbOTuQTXP+y+sHKm3oNf7hp6rKBemO62GgGupRKQr/B8B6QWF+lOv6i7At4vSxrq:rbOaQ5pt0pZzru1V8BjWFS+pE5d8

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/KwMusicNsis.dll

    • Size

      419KB

    • MD5

      06029e624f1d222e59ac641b2ce426b6

    • SHA1

      6ba2875bee2eae79c0e1eaa8aa236038c8db6044

    • SHA256

      09fb37e917faea5c966bc3418d1d7e46e3d0b9912cadd56486ba5bb5ac0f7b10

    • SHA512

      516c04cfc31204879a0c938961208416ddd4ca7204606d630abe860c81422aa1316e45e29669ba01a7506af3f05284395c7c46524f2e73f36d3b4274203de70b

    • SSDEEP

      6144:wffwCybl87db7ty4wrqnh4V+mZUtU5iNtKxxaTlWWWWhP+mZUtUQlDtr:fCyJItcrqnhyiOx0T3ODV

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/NSISArray.dll

    • Size

      32KB

    • MD5

      8b43a3f284632edfbb51665b2e0b8a3c

    • SHA1

      af6ab111856be7af7212a82b052e8b5656159b35

    • SHA256

      336e588999bf6b1cd6c894dbf5a73b2198d48c935f8b1251687845cce467dc67

    • SHA512

      3a9add285d074db534937b193b92f8e0503c94c97b11f0abe5d9358342fbc57461ba1f559fa19e0522cfec914b8a007f11bec34abef17faaca5de8bda0dbaf94

    • SSDEEP

      768:uCyg1AT+KRSHKrHrkJg81qdJd18atH18Hup23+zj+:WgcwHgn8Uh8an8t0+

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/ShellLink.dll

    • Size

      16KB

    • MD5

      94cd75cf49a6f065e9009e1b3db601b8

    • SHA1

      4227235ff30cc0d79d8191dbce99b22d2b6369a1

    • SHA256

      247c2fe74cc14ff48fcef21036fe1066f9fd356c404f778a651b956f285a226b

    • SHA512

      8d3079f103f298e3430b08f829c527fbdad1590a01c2233e4d9f443137d7da4cf9287a53233e0c3c25743df1706d7fca2bf01e4d877b7a59c50c1decbb3d701b

    • SSDEEP

      384:nU68UnYPL5N+1U7dAON+1U7oSp23+r/jLvEc:nnzd18018oSp23+zjAc

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      7df8fb4196186f28cb308f9952d7ef64

    • SHA1

      f20a7259ad233ac3795b6e6537de658209a8fd40

    • SHA256

      72253837028abed272e5d50a3a6771933e9dd1aad73e90b8db4538aa9c786cbf

    • SHA512

      3f373d69664ce015ceab16c12ba4c806c3489b89ae9db282551ec2452acd2ced1d70ddd4de0ef8c56d62a715624c9d2ceddc968adf07e905f2e4c81c2850ae4b

    • SSDEEP

      192:jEvCcZ5+twSkY1YLKs4C/nWRfVMd8kQdOPEbpNZ8rQ6prY8:iCAGCYNs4C/nWxVg8kTM1yTFY8

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      61KB

    • MD5

      8bde726084a37cacd13a7e03259f953f

    • SHA1

      25400124fe8b399d659d5853f45e388a5a53b61a

    • SHA256

      19a8e8aaa8a8d6c6e49ffd054b1c62f562eda5909aa6e7863c65c5f858f5fd18

    • SHA512

      2f4932fade786312ba72c0f12d51bb1e561fd939597983dceccc0f0d7a53f18862f362473620c0788be039bb4977f0e23b541c61d67ab0ba9a043be963694b23

    • SSDEEP

      768:IWAGVKaWi9rA8RhcTG3HvTIVQf3EczqWhP6v4d18a18Gvp23+zjB:IWRZ1zcybIm3EcNhUM8K8/0B

    Score
    1/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      3ff6d8bfd6784eb4325102d9f76a0fe1

    • SHA1

      1eedf67a5f3ea636bcb621402bb679d3e08c0414

    • SHA256

      6da0ec15a4d3bbcfdd82d36838abcf8d57515d06049290801e5d71b4fd021dab

    • SHA512

      dcc6c3ad393503c6527528d4fccc8b4faf25c6ff50a08c29247ab144f444d31590e3f7a581b2c955b0a109b552f0b7e3b4ae1849228d31a220d46eb5e1e2d26a

    • SSDEEP

      96:pwsl+ukKv9ZmksljxV9RtSA2RV8YWpg5J4U3mZjwdE6o8zfFeZtrmfVEBbYezMJn:7l+UvsjtSA4NigAU3mtvkFeCNyxzMzV

    Score
    3/10
    behavioral15behavioral16

    • Target

      $TEMP/kwuninsthelper.exe

    • Size

      100KB

    • MD5

      b759bbbb1af31b9fab3954360086f828

    • SHA1

      f43c8195d0d8303a316218a4958b790c4f965818

    • SHA256

      9cd242782f6c82b27396c2a1133df29cfb3498f64875e756c155dcd10a647426

    • SHA512

      1914d5d0f780d33eccddb11b244387737c8fcc18deeeca3bed50e17510f0e5a7b8850afbe99dd3cd8037720af32e8c1599fd66ed4c2d77bdb74fcc5773dc42bc

    • SSDEEP

      3072:1F2XRicPKz1CTUCECCIeJ5KxaE9Zpf4EBLJaLn8:vD1WU6Zf4glaI

    Score
    3/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks