Overview

overview

7

Static

static

3

035a63c0c2...18.exe

windows7-x64

7

035a63c0c2...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

FlvPlayer.exe

windows7-x64

1

FlvPlayer.exe

windows10-2004-x64

1

apps/ffmpeg.exe

windows7-x64

1

apps/ffmpeg.exe

windows10-2004-x64

1

help_Web F...er.chm

windows7-x64

1

help_Web F...er.chm

windows10-2004-x64

1

player/flvplayer.html

windows7-x64

1

player/flvplayer.html

windows10-2004-x64

1

player/flv...w.html

windows7-x64

1

player/flv...w.html

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    035a63c0c261105e96d936c6404fa057_JaffaCakes118

  • Size

    2.4MB

  • Sample

    240623-2q95dswdka

  • MD5

    035a63c0c261105e96d936c6404fa057

  • SHA1

    a32fe1241b2c507684bb59538de19485cbcbb25a

  • SHA256

    c4865e85bf77580a76cf37177dc0e4c0c5e4a471437111e891f55ea7b557cafe

  • SHA512

    e9143993d45c294d626ede9abaef48d09c0d0b8685d694f3db27b4131352ac665324f6cd20daca3bc0e366886939162d446c9cdd41ebe9552941499b9856e03c

  • SSDEEP

    49152:B1fPKD+oqO1x5LwVCprUHJM+2TNx+K9XEMrJlSoHY6cOqzAytOtNNORM:B18xHbLsarIGNxpEsJUm+OqzAyaz

Score
7/10

Malware Config

Targets

    • Target

      035a63c0c261105e96d936c6404fa057_JaffaCakes118

    • Size

      2.4MB

    • MD5

      035a63c0c261105e96d936c6404fa057

    • SHA1

      a32fe1241b2c507684bb59538de19485cbcbb25a

    • SHA256

      c4865e85bf77580a76cf37177dc0e4c0c5e4a471437111e891f55ea7b557cafe

    • SHA512

      e9143993d45c294d626ede9abaef48d09c0d0b8685d694f3db27b4131352ac665324f6cd20daca3bc0e366886939162d446c9cdd41ebe9552941499b9856e03c

    • SSDEEP

      49152:B1fPKD+oqO1x5LwVCprUHJM+2TNx+K9XEMrJlSoHY6cOqzAytOtNNORM:B18xHbLsarIGNxpEsJUm+OqzAyaz

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    behavioral3behavioral4

    • Target

      FlvPlayer.exe

    • Size

      968KB

    • MD5

      d2c022894a8c0d589da39b8f0570f5e6

    • SHA1

      958f99c02ae903ee86ec8c68c31c0f184b591b47

    • SHA256

      3156dc30acab2a6f626d9267e5809cfa28bd7050986f93e14abcae893ac1438e

    • SHA512

      f9820d987c2ea6cfcd668d79f9d7a5b5d21fadce5baa590f5df8c4af91713310fa71e3b08f4d2d941afecff075e2f6293855c6d50ecb25b6f0751b8f9f3ee7db

    • SSDEEP

      12288:Gwb+YDy87N9ANwKlWrWG2fKaMkwuNxNtIb3cgHQIi+1gfhN0d0MwJS1SSDSSPmzo:Gw/yONEIimS7m

    Score
    1/10
    behavioral5behavioral6

    • Target

      apps/ffmpeg.exe

    • Size

      5.6MB

    • MD5

      ceceffd98db17559d94c735f7e3f9c16

    • SHA1

      f10e974decd130e72c31bdd6b1bc8b8a64826ce4

    • SHA256

      a8732a235b3e6fb16ba07fa7ed96b4045ab020f68f03b7c5811e8a460c4aac7e

    • SHA512

      8eb6c8470b0e6adc83de2402af41c1a6d77855eca8d0d223e479929d46989e3e72ddac3bcc693217997c8be8f0dd5ebd4a9066f42635172b4ed2c6af44d9e59d

    • SSDEEP

      98304:wSLoJ1N49xMyydX06UQneMJcjwbtIY2s9DPyo59mKp20:RoDkXydX06YQcjwbMmDPJoKp

    Score
    1/10
    behavioral7behavioral8

    • Target

      help_Web FLV Player.chm

    • Size

      295KB

    • MD5

      7c6e47c27ecc6d01119f017cc7562559

    • SHA1

      e47402610076fa1346c60cc961869f98e53e7e5d

    • SHA256

      1641ff6cef3b117805381397dbd23509df8e71d8a2faa1580f90ac5ed67912e9

    • SHA512

      8ac840c7897397c41f105bcb5a6a5e9381c21a6c8cdf6014f508de87d61de2b76fdebe8abbfacebdf39612f1d9b622cd383a6be97a2287c8902f511b0888526e

    • SSDEEP

      6144:x1BmzTmvDGNQMcsc2CjOW3VsKB1vK3LHFNlX+tnQew7AbTScF0Vs:NmzGa+MdjCyoprvyLL4tQenbnKVs

    Score
    1/10
    behavioral10behavioral9

    • Target

      player/flvplayer.html

    • Size

      1KB

    • MD5

      2b1b314282a57b4cc687771347694c94

    • SHA1

      f43b1990d8402919fddc49f85dec028697bbcbce

    • SHA256

      61e2f5b1a83e8fcd77889a72339d30ca967c2e5cb03f481801572ca8c510183b

    • SHA512

      4582136f2ed564ebd4d2064b7ca06b79e6feb138a2877bc7e1a4496568db9198e5c7adb702f57631b2eaba1bdb1903420992c4792ff0610f8b151023633c0b94

    Score
    1/10
    behavioral11behavioral12

    • Target

      player/flvpreview.html

    • Size

      1KB

    • MD5

      678ac5b70a7d0b5d02763285c8a9064a

    • SHA1

      40a0eca3ab093f8c10b331d90dfe347960b337d7

    • SHA256

      6be1a7fe89a7e6d58bf3a778d587fb6eddceeb3c3c0092776f86f1f97c07a7b4

    • SHA512

      923dee80b5c90287961696b4c3383af8bc4356dba134b599c11d020fd6edad81cec79d4d367f75174a61a32cbec0cf884abaf619c78bb93a61bb4bcd515397ed

    Score
    1/10
    behavioral13behavioral14

    • Target

      uninst.exe

    • Size

      56KB

    • MD5

      692328b04a13bbcfbd177be704cabc17

    • SHA1

      3c4ec763e3e8346a4215b46bb16857445de6547d

    • SHA256

      a7f15c3c84acb7348d322663288070b92c44d6e7141d77fa314ed807025f7d51

    • SHA512

      74f20cd11d472b7fc61be559d7bfc8ae9348ecd06fa33f0f06b55dd46c7879d7cac317e63f568108d13f449d04cc5979db3c258edabe2947633cf16fe5bb7f7b

    • SSDEEP

      768:d1cVhpQI2EQK0iPDh84nScF15GYbWjXO3XJ+Lgd2iZQAm6kRRS+NoJRneAa6Vl6c:rQpQ5EP0ijnRTXJ+LgdLeAyNxAa6Vv3

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks