Overview

overview

7

Static

static

6

1549c1e71c...18.exe

windows7-x64

7

1549c1e71c...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$WINDIR/Wi...80.dll

windows7-x64

1

$WINDIR/Wi...80.dll

windows10-2004-x64

1

$WINDIR/Wi...80.dll

windows7-x64

1

$WINDIR/Wi...80.dll

windows10-2004-x64

1

$WINDIR/Wi...80.dll

windows7-x64

1

$WINDIR/Wi...80.dll

windows10-2004-x64

1

AdbWinApi.dll

windows7-x64

3

AdbWinApi.dll

windows10-2004-x64

3

AdbWinUsbApi.dll

windows7-x64

1

AdbWinUsbApi.dll

windows10-2004-x64

3

CFLite.dll

windows7-x64

3

CFLite.dll

windows10-2004-x64

3

DriverInst...64.exe

windows7-x64

1

DriverInst...64.exe

windows10-2004-x64

1

DriverInst...86.exe

windows7-x64

1

DriverInst...86.exe

windows10-2004-x64

1

JavaScriptCore.dll

windows7-x64

3

JavaScriptCore.dll

windows10-2004-x64

3

SQLite3.dll

windows7-x64

3

SQLite3.dll

windows10-2004-x64

3

WDJDriverI...er.exe

windows7-x64

1

WDJDriverI...er.exe

windows10-2004-x64

1

WebKit.dll

windows7-x64

1

WebKit.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1549c1e71c2829f9797d9cf5f24e106a_JaffaCakes118

  • Size

    14.3MB

  • Sample

    240627-j5mzastank

  • MD5

    1549c1e71c2829f9797d9cf5f24e106a

  • SHA1

    8422793a9e97355af4903d149bf944a8b3f02364

  • SHA256

    32b4bc7fefad278dca61055c972b0f2e0e2a7f3a25e087b85e38c895f1e7fd5c

  • SHA512

    007b78079c87788829920228355bf9ad42531141886a128f7595e7067a77bdedd5c1d2ff85f02c95a6bc8bc092cffb3548476e0bbf0ec6b8ca0d0e1707699b02

  • SSDEEP

    393216:SEAYhqaenepkzAEb1SVn3CcDyrt8vWL8Qr:SEXqL2ktpS4myrsWTr

Score
7/10

Malware Config

Targets

    • Target

      1549c1e71c2829f9797d9cf5f24e106a_JaffaCakes118

    • Size

      14.3MB

    • MD5

      1549c1e71c2829f9797d9cf5f24e106a

    • SHA1

      8422793a9e97355af4903d149bf944a8b3f02364

    • SHA256

      32b4bc7fefad278dca61055c972b0f2e0e2a7f3a25e087b85e38c895f1e7fd5c

    • SHA512

      007b78079c87788829920228355bf9ad42531141886a128f7595e7067a77bdedd5c1d2ff85f02c95a6bc8bc092cffb3548476e0bbf0ec6b8ca0d0e1707699b02

    • SSDEEP

      393216:SEAYhqaenepkzAEb1SVn3CcDyrt8vWL8Qr:SEXqL2ktpS4myrsWTr

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      15KB

    • MD5

      67d8f4d5acdb722e9cb7a99570b3ded1

    • SHA1

      f4a729ba77332325ea4dbdeea98b579f501fd26f

    • SHA256

      fa8de036b1d9bb06be383a82041966c73473fc8382d041fb5c1758f991afeae7

    • SHA512

      03999cc26a76b0de6f7e4e8a45137ee4d9c250366ac5a458110f00f7962158311eea5f22d3ee4f32f85aa6969eb143bdb8f03ca989568764ed2bc488c89b4b7f

    • SSDEEP

      192:CsIZHdT9uwYX94kYd2iCzHR+yK7imphLAykycpKPd5m78ozxGUWumle:CsUHd9GN2d2iwl0impATIPdA78Ov6

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/ProcDll.dll

    • Size

      36KB

    • MD5

      aeae96883efac0a9b0fa2f1f1f8ec8bc

    • SHA1

      4bd5481e7b1e9a324a77fe5d360df187ea44317b

    • SHA256

      b08792fd89e0848f9533fda211ad90a7d3fb065ff35efa83c0b20a2a6c368cf1

    • SHA512

      df996a8697a7f2de8e2a483a3d4faf51551d7d49a2882b8eac82e33df25a8d181a40bbe83e976683387221fd06507f965725e5c1df0ef27bbf49d1d8b0223064

    • SSDEEP

      768:hCBLfHcD9eBRaacNXHxWrlwDmWvMOvMNyIL1gVcOQ6Q2G5BHJx/:EBLfH09eBRabXxWr8Kr0ILaVcO/9G5p7

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      959ea64598b9a3e494c00e8fa793be7e

    • SHA1

      40f284a3b92c2f04b1038def79579d4b3d066ee0

    • SHA256

      03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b

    • SHA512

      5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64

    • SSDEEP

      192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe

    Score
    3/10
    behavioral7behavioral8

    • Target

      $WINDIR/WinSxS/x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989/msvcm80.dll

    • Size

      468KB

    • MD5

      75f2a9b695ef3ef22d731f059920f636

    • SHA1

      e665f073f8eba6482d8fa26d5a213c607d8470ec

    • SHA256

      e645846ffd536957f51fbe223e1dee0f834a5fc7043d956a71e6933c1ce5ad9e

    • SHA512

      8eed3eaf4e4e3217bafa1b5a009a739aa5663c6ce86f81aef88995f4bd2b2296f2c09b935e7294ff24fded72a0c2e5ea95f3acfa96023eded328b88b050c182d

    • SSDEEP

      6144:C6KTZsHDwx0TCAQpFTfnPyrerCqq/KruohQFHCxrgtaoOjMQlyD:4sHDG0TMAxKFhQRCxrcQ

    Score
    1/10
    behavioral10behavioral9

    • Target

      $WINDIR/WinSxS/x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989/msvcp80.dll

    • Size

      541KB

    • MD5

      8c53ccd787c381cd535d8dcca12584d8

    • SHA1

      bc7ce60270a58450596aa3e3e5d0a99f731333d9

    • SHA256

      384aaee2a103f7ed5c3ba59d4fb2ba22313aaa1fbc5d232c29dbc14d38e0b528

    • SHA512

      e86c1426f1ad62d8f9bb1196dee647477f71b9aacafabb181f35e639c105779f95f1576b72c0a9216e876430383b8d44f27748b13c25e0548c254a0f641e4755

    • SSDEEP

      12288:UZY4lOHMwLwXBt+ia3htSUa/hUgiW6QR7t5j3Ooc8NHkC2eSQ:UZY4lOHMM8wiShtSj3Ooc8NHkC2eT

    Score
    1/10
    behavioral11behavioral12

    • Target

      $WINDIR/WinSxS/x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989/msvcr80.dll

    • Size

      617KB

    • MD5

      1169436ee42f860c7db37a4692b38f0e

    • SHA1

      4ccd15bf2c1b1d541ac883b0f42497e8ced6a5a3

    • SHA256

      9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46

    • SHA512

      e06064eb95a2ab9c3343672072f5b3f5983fc8ea9e5c92f79e50ba2e259d6d5fa8ed97170dea6d0d032ea6c01e074eefaab850d28965c7522fb7e03d9c65eae0

    • SSDEEP

      12288:bxzh9hH5RVKTp0G+vjhr46CIw+0yZmGyYCj:bph9hHzVKOpXwymGyYo

    Score
    1/10
    behavioral13behavioral14

    • Target

      AdbWinApi.dll

    • Size

      99KB

    • MD5

      570c5d1daced7ca5280a9843938275ed

    • SHA1

      fa738e91bde4d0dfda52eaefe8fabf8e7c1f1371

    • SHA256

      48ff9a5b7d29539715f2ca5cb67ecc653c3ce2589a313872a0f79d7121a6aeed

    • SHA512

      c6924a8114aa6b6c8037b9af3bff8c6b1dbb5d1f76864c0b444998831e90a56c3208e91a29baf4603ab954742d2c71033428392d472f629b70f44858d86677f6

    • SSDEEP

      1536:TpCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGtMmQF:Tpo0k6ZWVTaif6sCGo

    Score
    3/10
    behavioral15behavioral16

    • Target

      AdbWinUsbApi.dll

    • Size

      65KB

    • MD5

      945bfb3af4ee162d91604857529826fe

    • SHA1

      dd2bd9cc979856dfeaa6f0e9a5e5305f3b2090d6

    • SHA256

      9b4407e3e15b9348de35b0c0befa554b1147044d153e0824fac1192bc22acb2e

    • SHA512

      b7d156954540ee65a7cb79f2de618fb243a00ba46158791c99c6135454c96ba8efb1660966ad6ed4be7cd201e4358c2140608059c469b8db8263c7c0b26a9d95

    • SSDEEP

      768:XLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIWMLKQ4C:OyY8wugEwOVEXdz70e4gIrmQ1

    Score
    3/10
    behavioral17behavioral18

    • Target

      CFLite.dll

    • Size

      616KB

    • MD5

      db877a247e71e15cfdccba60f1877dcb

    • SHA1

      e3b8fa9b6e0761fa33c45b0c6773bc1b553247d4

    • SHA256

      19bc274d351d4bcc70a7f1698977d281f02e63ba391da331c7580657abd3339d

    • SHA512

      aa6cf3dc5997d47f84f1b6a5bee052331828f7a9ee88b46ee16cc09a17e09840edfebad87d2fea9dc4de00b9dab4d161f7712621439ca1c82ae91d4f2a82b1ed

    • SSDEEP

      12288:872wIPzo866j7r0Tnk20FB/T9CCaHQe+Q1LyC4xczG/RHxQYEHV:872wI0AraIQ1LyCgNxQYe

    Score
    3/10
    behavioral19behavioral20

    • Target

      DriverInstallerX64.exe

    • Size

      25KB

    • MD5

      18c45679bc9941d9e877d2d61a2638e8

    • SHA1

      f47e7c7d3e9c459bb4b4d3a1931f2424756467fe

    • SHA256

      2412fbf83ccb662d40cd55038348bad3d953c9d09ca61a9f7142e3cd07584a05

    • SHA512

      e178da95ebedef8fdac06346358216a87298f9d043d962f7115c7a65e0d17ce96466b6c6575535eed7b384a5405ff7fb8314dbc5416b5c9c545a6b4eed5f46d6

    • SSDEEP

      768:HUaHdEwSfg+j7K6MSYt8TApcyO/RALKQ4g:TnSfgUnxTAphO/RAmQ4g

    Score
    1/10
    behavioral21behavioral22

    • Target

      DriverInstallerX86.exe

    • Size

      175KB

    • MD5

      6e66836f75bd8e34aae2a47580ce6025

    • SHA1

      0726024c78a9aa1e86d722190ce964ee58adc2cd

    • SHA256

      a91c58f0b6c718aa099752668f5b9510ef24d80142d96189c6032c3e92b84d22

    • SHA512

      81fabb2453dee173c038aedc01634b2330107e86ecb7c2427d37dbb56a067d381c862ed59cca4ae9e3a8f56cfc900193d407b3c547912427e008b76c2a498c99

    • SSDEEP

      3072:fYoydY0TvRPEUym/kpV3VrzY0StJfr7cc5IKjR:wo70L1D8pDHohPcVKV

    Score
    1/10
    behavioral23behavioral24

    • Target

      JavaScriptCore.dll

    • Size

      1.0MB

    • MD5

      ead52ccb16b62ad68663f783113d989e

    • SHA1

      21031b18b702c9ba836b90bd523dbca3319e0b62

    • SHA256

      a777c71a5e9376523984b7c12da32cec1db8f49523b6d8f62a63b839580f031f

    • SHA512

      f067a85c2d131c3e9ca978180da95543385a8585a66ea42d9e941e0421ea6e8b423ba8f7b674482aa8c6899303c87ad3866459b42884bf401a732a59dca0352d

    • SSDEEP

      12288:pDo6zMz6gW/60G1U71jlU9u/iLLGl5NM+rUnFg5AfV3zFABKvmf36R5Zc1no7cga:pamy9wJSmcQ4GKai5H/OXjsjbCsHY

    Score
    3/10
    behavioral25behavioral26

    • Target

      SQLite3.dll

    • Size

      461KB

    • MD5

      ddbfe57fc6827d38a751c83b95a27e35

    • SHA1

      00f4279f4dccf3333d81cde098e522239db28f9c

    • SHA256

      357c3dc9207400797dfd0b3bc69d047a2be6742c348f43fec3618985d9528803

    • SHA512

      b0ab7e0db44e0c380652f2a21672158c5ea56c38bb00aa99bb361f2a23b8a1a133a4a3e01b1ca222d56a8de691bfc7fd1dc991ca399ae5305c3438ac779f2ed3

    • SSDEEP

      6144:CpLqUHwIdjAVbqbTbNYknr1FSf1o0CgcTV2zmlJMljc7Rn1Wrudd4OESJndwzR:CpL7j8+bNYkeTxcTAwJhNd4IdwzR

    Score
    3/10
    behavioral27behavioral28

    • Target

      WDJDriverInstaller.exe

    • Size

      1.1MB

    • MD5

      a60ecf488e05688d08748641eaad96e0

    • SHA1

      9a555170bdb89d3cb8d3da8c5d34a59990d752a8

    • SHA256

      25e5a44e5121506c187177d5aee050f412dc9a27d11830d9348033abbd985f24

    • SHA512

      9765d5321398ccafed222f4779771c3c92214f8c6a058a287b397e91622f276cf3e2f6377b00e46d326fbbd38fce2c44d630637eb9207e36da12fab8c7016085

    • SSDEEP

      24576:r/qle6BF/Qybndz5b9+hPW72x9+3PUtqT6vTkThXFHjd80:7+Ndz5b9+JGPUHvTkTtFHjd80

    Score
    1/10
    behavioral29behavioral30

    • Target

      WebKit.dll

    • Size

      6.7MB

    • MD5

      f7cd4c3e8eb817ea08ebd7b26f6be9e5

    • SHA1

      6131a33239e3e49bf8a65ed15e1f9096cd19d7f5

    • SHA256

      460100090d12c0d79016f56229b807c0623db39ee0944e1c7e8cb0afc05ce70d

    • SHA512

      62c6bee96fc042d9de359f4662e1e15a368ddd7c2399936899adfdf35c86181475a1c14152d3484bea02323d7906b12eac3b2425d437dd8443e6585c8ff258c0

    • SSDEEP

      49152:KZrVn/pbln488GsG2pu+/U7dd55XMzsw39Qm7D8scc1YYvUpjJNhCSIe4AIT2FKG:0p/J8vuD7ZGCmjcc2aIjJNtQtIKG

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks