Overview

overview

7

Static

static

3

05b2689119...18.exe

windows7-x64

7

05b2689119...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/Math.dll

windows7-x64

3

$PLUGINSDIR/Math.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    05b2689119c8d9cf1428d0e9077a6a48_JaffaCakes118

  • Size

    233KB

  • Sample

    240624-ayrt8sthnl

  • MD5

    05b2689119c8d9cf1428d0e9077a6a48

  • SHA1

    c231d46a81bbf94aa4dfa638111d291793d33f7b

  • SHA256

    cd403b5283c695722f8197c1b749949d82c986842ebe06c4dbba838e1433339b

  • SHA512

    ead14d0b5a261984e1d23f32237063b6f5caa9cff1892403798a2520025d267dc2f5a0013db13132bf82b82a07330b03286802da1ec93dfcdcd6abf159e58984

  • SSDEEP

    6144:8N7l7ZgJTFLkHEUVlHYvU1kwbuw3YZAV58P6msN+n/MZ:2gJpTUVlHY0kwbuwrUPPsN+n/m

Score
7/10

Malware Config

Targets

    • Target

      05b2689119c8d9cf1428d0e9077a6a48_JaffaCakes118

    • Size

      233KB

    • MD5

      05b2689119c8d9cf1428d0e9077a6a48

    • SHA1

      c231d46a81bbf94aa4dfa638111d291793d33f7b

    • SHA256

      cd403b5283c695722f8197c1b749949d82c986842ebe06c4dbba838e1433339b

    • SHA512

      ead14d0b5a261984e1d23f32237063b6f5caa9cff1892403798a2520025d267dc2f5a0013db13132bf82b82a07330b03286802da1ec93dfcdcd6abf159e58984

    • SSDEEP

      6144:8N7l7ZgJTFLkHEUVlHYvU1kwbuw3YZAV58P6msN+n/MZ:2gJpTUVlHY0kwbuwrUPPsN+n/m

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/AllRemover.dll

    • Size

      52KB

    • MD5

      c4c0c23f01fc5e2b407e2463e8f5080c

    • SHA1

      7a55985593a6398d1a66883ae5f5929d4d9aee52

    • SHA256

      ff0f59a359c306b0cb0a8ed935e2e1208d3532607c32ab849cccb7a15f09dd3d

    • SHA512

      013232e5b14fae8aa83f1e2541370003911f8c827df8a4e419b0ba1f2c090033c97b2fb589e9e27935a45cda0ccf1a8f1076c3342e940b754845a2cec2a421de

    • SSDEEP

      768:S4PZ0bC2AlPWJh7EfeaHFiqwJAw0Kn+ZjAuZHmd4l/e:Sm2AlPihQfeuoqwJAwHOceHhl/e

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Math.dll

    • Size

      14KB

    • MD5

      bc8b9990819748dd57ccf28b73df57fd

    • SHA1

      3e4f4bef94dec5745e49bdedd9c8ee85621d507c

    • SHA256

      f7c310298a938c77b52094280b56da106d00a63705e2cc4b3eb2a730be01ade4

    • SHA512

      fbeed46e079ae36ae26b655b3bae0cecd89181c8919b4a3aa03d4b32e3a8e365be0ab8df7ffa6e08576e4b8d797edc88a619e21af1d0d7df822250e2ffd3e57b

    • SSDEEP

      384:S0sNHl4OeYVgElyR6e1VF6YZpCLk0jd+Egmmi9wk6MVMwh/xCIFh:lISOtG6eQYOrhJg1iWk6MVMwBxCIF

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/PopOcxUnRegister.dll

    • Size

      156KB

    • MD5

      ab8540a8551fcafe4b98ede6abed16d7

    • SHA1

      6c578862af0bba65c3d83416d355d32ac53e7282

    • SHA256

      e0b2cadebd50548535641e0543ec25f053633773604a6f30b0bbb667faf2088d

    • SHA512

      813404e6bd98b472a590a1e486368034aee2811de325d1385211dbfc7e3367ad8b52dd9e13a8d78a8d1e69768e7bd778b8cf78a5601bc154bcd8a8a15562deee

    • SSDEEP

      3072:LMugLA0xjazA1Nqm888Q9s/XGQtS/Frwl+Eulf7DAyibk:L8LAkjbotN3uES9EDL

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      0c8ea8e6637bbf8408104e672d78ba45

    • SHA1

      c231c7acaf9abb7da93f28e1b71bed164d57103e

    • SHA256

      509a93177a7ae130bc3b6b5ec3236c7aa0811b8b86f8ab3442c65fdf8ff85b1f

    • SHA512

      ee763a3cdbbba3b28e6a903ac942c7228bd8e54b19de21d6187e481f2916d833d9b9800e5ac2998f4aa26274cdfb20a8bfdd10f00f2a15d37bcc529b617e1f28

    • SSDEEP

      192:+OSsJI/rqmIDNLU0dq51EgAiNbubv68LZ:QHQQ0d01Egbq768

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/UnInstallCount.dll

    • Size

      116KB

    • MD5

      f90028c2a72493b8e84585beca82d549

    • SHA1

      60202a7086b9d905a122779524d1111081d85f00

    • SHA256

      f57f2c64fdc084f4495992dd7930b1427fcb769377f167027d5b9dcf5e442729

    • SHA512

      b32f99117f5d0ad099aab706fcf5262b227e5717070ab466b7bf2182944d730dc56900eaf7d6541f30093dfd27d3632d6a2474e11da85deb036c20203773c357

    • SSDEEP

      1536:Wj8BRZ0D3WkEdpBGpjBVLmixRWYkjWI4wmVjrriqs+45CtjlUrhI:nB70aldn8VpNkjWusBs+mCtjlU9

    Score
    3/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks