Overview

overview

7

Static

static

3

15ed44ba3d...18.exe

windows7-x64

7

15ed44ba3d...18.exe

windows10-2004-x64

7

$PLUGINSDI...am.dll

windows7-x64

3

$PLUGINSDI...am.dll

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...ac.dll

windows7-x64

1

$PLUGINSDI...ac.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

1

$PLUGINSDI...LL.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$TEMP/nsisos.dll

windows7-x64

1

$TEMP/nsisos.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15ed44ba3d7d61751c34d80bc7a1fbbd_JaffaCakes118

  • Size

    146KB

  • Sample

    240627-n6pazasfnk

  • MD5

    15ed44ba3d7d61751c34d80bc7a1fbbd

  • SHA1

    6b40bab78678625d74ecc1843e17d23480cda814

  • SHA256

    159b6fb87fc80a128bf675acfd3a5d5887e463c07cc041a56032bbe22ef289ff

  • SHA512

    0e4123449add33d2311e1e0005d75d7a3d6898739c25dc07c7544e1a3a0d39ac98d0b2e9284df57a3d0b3669bb70c089c236111bec514f62849ecc5b6431289f

  • SSDEEP

    3072:FgXdZt9P6D3XJKzQ5UaSkEGlcE6rF6tcBpTlSg/UaRhLlf7:Fe348HkZp6rF8EVv/Ua5f7

Score
7/10

Malware Config

Targets

    • Target

      15ed44ba3d7d61751c34d80bc7a1fbbd_JaffaCakes118

    • Size

      146KB

    • MD5

      15ed44ba3d7d61751c34d80bc7a1fbbd

    • SHA1

      6b40bab78678625d74ecc1843e17d23480cda814

    • SHA256

      159b6fb87fc80a128bf675acfd3a5d5887e463c07cc041a56032bbe22ef289ff

    • SHA512

      0e4123449add33d2311e1e0005d75d7a3d6898739c25dc07c7544e1a3a0d39ac98d0b2e9284df57a3d0b3669bb70c089c236111bec514f62849ecc5b6431289f

    • SSDEEP

      3072:FgXdZt9P6D3XJKzQ5UaSkEGlcE6rF6tcBpTlSg/UaRhLlf7:Fe348HkZp6rF8EVv/Ua5f7

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/DLLWaitForKillProgram.dll

    • Size

      28KB

    • MD5

      9c4b8ec42d89f7557bfd90798ce52787

    • SHA1

      2376dde426ea65aa27c30e304086310605382475

    • SHA256

      ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548

    • SHA512

      17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7

    • SSDEEP

      96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/DLLWebCount.dll

    • Size

      28KB

    • MD5

      0bdd7c6f1046ea4b42839f991ae53fb2

    • SHA1

      cb9baefb10159b4a684fa1ee4372e7715865052d

    • SHA256

      0a0019b2603dbc4505453c2501255ab0cc0b3c317ece4a6ce0cfb6a02a30907b

    • SHA512

      96f41497f25d7bc81f51ab167f74243b4b767089c89c26f9752ef518fa60dedd2722c66ae87dad2334bcce1622bc12f7b9b892ae654ca58cecd9f35c9f1dc163

    • SSDEEP

      192:OQoR7CK9FX/dVPWtJ/tXP88bSNwWW8+YdbDT:OQcWeJ/XPWtJxPFYi8nb

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/GetMac.dll

    • Size

      92KB

    • MD5

      933a417c57aa917067d5300d912f0276

    • SHA1

      891095837e1df4615baf4cb30c259aa1cbe76b21

    • SHA256

      3b28b3af56b915d779d9620f0e28026eb351fbb52b6a12629fc24d0a93a355a4

    • SHA512

      b417d937aa4c855332cd17243d7f06ebb2bdc0156633ecd69157514804669bb083f8e843b2d30f2b8bc1425feee09966ac34f8cc6a493a4939521c1ac8ad92ec

    • SSDEEP

      1536:jUrLsKTrLAJWEb7DnO+3hlGMItSocaZGDxfBK:jdeEWEyIhlNIwocaZKA

    Score
    1/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      eef9e469e8a30717974499f277d97e2a

    • SHA1

      2d33c25984ebd9116beeb55cdde4c5c86c023e5d

    • SHA256

      1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078

    • SHA512

      d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48

    • SSDEEP

      192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      36KB

    • MD5

      6958016193a066833556992077bad4fe

    • SHA1

      5f564945936f99381d7e2408f034f97d069005a4

    • SHA256

      f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e

    • SHA512

      fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7

    • SSDEEP

      384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l

    Score
    1/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c6f5b9596db45ce43f14b64e0fbcf552

    • SHA1

      665a2207a643726602dc3e845e39435868dddabc

    • SHA256

      4b6da3f2bdb6c452fb493b98f6b7aa1171787dbd3fa2df2b3b22ccaeac88ffa0

    • SHA512

      8faa0204f9ed2721acede285be843b5a2d7f9986841bcf3816ebc8900910afb590816c64aebd2dd845686daf825bbf9970cb4a08b20a785c7e54542eddc5b09a

    • SSDEEP

      192:qADKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQbVUSF:qAViJrtFRdbmXK8+WVUw

    Score
    3/10
    behavioral13behavioral14

    • Target

      $TEMP/nsisos.dll

    • Size

      5KB

    • MD5

      69806691d649ef1c8703fd9e29231d44

    • SHA1

      e2193fcf5b4863605eec2a5eb17bf84c7ac00166

    • SHA256

      ba79ab7f63f02ed5d5d46b82b11d97dac5b7ef7e9b9a4df926b43ceac18483b6

    • SHA512

      5e5e0319e701d15134a01cb6472c624e271e99891058aef4dfe779c29c73899771a5b6f8b1cd61b543a3b3defeaecaa080c9cc4e76e84038ca08e12084f128eb

    • SSDEEP

      48:6EyuygeHCfxwU5x+6kx/k1gONv27oBc2OkIrHHl:VeHCf2762kKsu7oGjkIrn

    Score
    1/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks