Overview

overview

7

Static

static

1

1637d4a54e...18.exe

windows7-x64

7

1637d4a54e...18.exe

windows10-2004-x64

7

$PLUGINSDI...mr.exe

windows7-x64

1

$PLUGINSDI...mr.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1637d4a54e3d1607ad29f26779786520_JaffaCakes118

  • Size

    108KB

  • Sample

    240627-q2wwcswfql

  • MD5

    1637d4a54e3d1607ad29f26779786520

  • SHA1

    4e518377d6420b802f4b87c01feff84bc6f7f70a

  • SHA256

    591d0ddc716585d9cf9a61d2ab8fa3b3de53812e3f07404f337abb92dc22b3af

  • SHA512

    c1ae2e8983f9e7a2863ce7aaa18e2866b5d43ed6150d6829357b08d2f8d8f7ea0525a6b5508cbda6d297f5886d6395f1474ccac009ccfb664a601d087f2409cf

  • SSDEEP

    3072:vQIURTXJ8eqgKJ+BCAC7SSzzq57ZxzA6Imrm:vsugKVlzzgBIqm

Score
7/10

Malware Config

Targets

    • Target

      1637d4a54e3d1607ad29f26779786520_JaffaCakes118

    • Size

      108KB

    • MD5

      1637d4a54e3d1607ad29f26779786520

    • SHA1

      4e518377d6420b802f4b87c01feff84bc6f7f70a

    • SHA256

      591d0ddc716585d9cf9a61d2ab8fa3b3de53812e3f07404f337abb92dc22b3af

    • SHA512

      c1ae2e8983f9e7a2863ce7aaa18e2866b5d43ed6150d6829357b08d2f8d8f7ea0525a6b5508cbda6d297f5886d6395f1474ccac009ccfb664a601d087f2409cf

    • SSDEEP

      3072:vQIURTXJ8eqgKJ+BCAC7SSzzq57ZxzA6Imrm:vsugKVlzzgBIqm

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/downloadmr.exe

    • Size

      127KB

    • MD5

      3c85066c68fc1edc6da8ec3887649925

    • SHA1

      fc2fcf2e964bf2ee4127530287a0c3f6057cb508

    • SHA256

      e77189c27645e70b4e9102f4e5f32d7ca4bb0eacb99d3a53ee2b4f1aac919f91

    • SHA512

      357263e601210a3248d1b53fa0f0c9f6346ded9c2c1f2cc0408743035e8352d38bd93d13e3fdcb87b58a425e8ebcda5da7813cf96bd51e16f34a3364eb3ac6c7

    • SSDEEP

      3072:ljWgVQ2dBzsIRQuI1Z0aqcU2Lk2kdh/wOZRDoQu/qq0M33kNAszGFAe:9WXqRGD0aqcUtb/xs3A9yJ

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks