Overview

overview

7

Static

static

3

18727f9489...18.exe

windows7-x64

7

18727f9489...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

prio.dll

windows7-x64

1

prio.dll

windows10-2004-x64

1

prio32.dll

windows7-x64

1

prio32.dll

windows10-2004-x64

1

prio_svc.exe

windows7-x64

1

prio_svc.exe

windows10-2004-x64

1

prioinst.exe

windows7-x64

1

prioinst.exe

windows10-2004-x64

1

ptm_nt.dll

windows7-x64

1

ptm_nt.dll

windows10-2004-x64

1

ptm_vista.dll

windows7-x64

1

ptm_vista.dll

windows10-2004-x64

1

ptm_win7.dll

windows7-x64

1

ptm_win7.dll

windows10-2004-x64

1

ptm_xp.dll

windows7-x64

1

ptm_xp.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18727f9489617c426cdd80939ecb9387_JaffaCakes118

  • Size

    721KB

  • Sample

    240628-ct89tsyfjp

  • MD5

    18727f9489617c426cdd80939ecb9387

  • SHA1

    b0fec0df599a67344322b3c05ba588597b5c869e

  • SHA256

    d3351dfdcaa85cea4092b34fcc93b96636d43d32b6ad338208dcb2c124de1756

  • SHA512

    2fd1b3fb8db38897a14473f70d88b15e4d23e6e35eeec6aaf63ae756dc7ec64f14affc8e4f8145075cbcd46226a459e62771f5249889f8f8a5effe7ecb4884ef

  • SSDEEP

    12288:YB8CU3PBeV+qh8JTkTSudx9IbLSPyl13s+N92zcF+kI71rnEyZcsoI:YB85JeVbNS8uK23iIFvI71rnfWI

Score
7/10

Malware Config

Targets

    • Target

      18727f9489617c426cdd80939ecb9387_JaffaCakes118

    • Size

      721KB

    • MD5

      18727f9489617c426cdd80939ecb9387

    • SHA1

      b0fec0df599a67344322b3c05ba588597b5c869e

    • SHA256

      d3351dfdcaa85cea4092b34fcc93b96636d43d32b6ad338208dcb2c124de1756

    • SHA512

      2fd1b3fb8db38897a14473f70d88b15e4d23e6e35eeec6aaf63ae756dc7ec64f14affc8e4f8145075cbcd46226a459e62771f5249889f8f8a5effe7ecb4884ef

    • SSDEEP

      12288:YB8CU3PBeV+qh8JTkTSudx9IbLSPyl13s+N92zcF+kI71rnEyZcsoI:YB85JeVbNS8uK23iIFvI71rnfWI

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    behavioral3behavioral4

    • Target

      prio.dll

    • Size

      12KB

    • MD5

      5daf2ad438e9de7ed5b8f0503921b328

    • SHA1

      308e6f5bf581cda1a9c5a6aba63894e2612870da

    • SHA256

      663d7f9942c012d538ceeb2ae7f6f3af7e33ea4794156624f5739af7d4f70fca

    • SHA512

      2adafcd0479639110661bb51d281242d7fc6be4c81e3f79e4035fa87bb4843bf7a21e852c54bf65fe0e6527497b8c53b7f5083fc89b90ace3ba5afc6a50a055a

    • SSDEEP

      192:qRjUU8gHR8hJ0Y4hrinGLmjCZtJIz0iWOeyowx4z57+L/lY65FD:qgU8gHR2J4h1mjitJIz0PYx4MLlYAh

    Score
    1/10
    behavioral5behavioral6

    • Target

      prio32.dll

    • Size

      10KB

    • MD5

      fc514b95f75a2c1bf52a14d39eecfd1d

    • SHA1

      d8c41228cf6e887812a596b19000139e56f76708

    • SHA256

      fae6d298f9f939d2c2f755fa284837b6c8588d616a04b30aea4ee475cbc118ee

    • SHA512

      99a71ba1a50e3d86bd949ee086e9c681a8655811c0637621d45775b3aa46e7393b046be02eba7919e3980a7dc06313c06c0139ce755feddae06378e80b168b9a

    • SSDEEP

      192:q5KDpjg40in97WZJ9rDKBc7mU+WOeyowx4z57+L/vY:3BJzWD1DKBcycYx4MLvY

    Score
    1/10
    behavioral7behavioral8

    • Target

      prio_svc.exe

    • Size

      9KB

    • MD5

      e2d3191ec4e8664dfc08ca2d2e852249

    • SHA1

      c010d4439a41836f82da399e16c2da6b9bede46a

    • SHA256

      7d86a01f3ea4ecef32bc8c6a7800fb14c4fd3958e462116a1c98a2f8552e93d3

    • SHA512

      adbe826c9e4966b76f1dd12ad7fac0be64d5b108176898d5e51f16d94ef479ed1d0a288f54f4b03c6a4bf47d7cdc986f9a69faa3a8158265220729d879eb2bd8

    • SSDEEP

      192:y2zIPdP2OkWggHWOeyowx4z57+L//YGP:h8PdqWjyYx4ML/YG

    Score
    1/10
    behavioral10behavioral9

    • Target

      prioinst.exe

    • Size

      61KB

    • MD5

      53ac9dc52e81f3fc663d74fa00f10c4a

    • SHA1

      6ca0f950d704705ec7f5646e1995a8ce262807d8

    • SHA256

      8b9348a10d6178e12785e0315cf5583397f156d78e88acc24bc12edee7e8de9c

    • SHA512

      0c702e5e8f499ba438b79aab05a8d7466fd3181acadcdab17f6a2cfad05a800500955029febc3a0286dca9bd6b749940e9e9d9ada26c89288831198b4234868a

    • SSDEEP

      1536:6XELD+fHOpdmtfjr/aLdolTyDSjgOuJ8FlK15c2e:6XoqfHAdmtfjgSyDSm8FlK15N

    Score
    1/10
    behavioral11behavioral12

    • Target

      ptm_nt.dll

    • Size

      289KB

    • MD5

      153a3e70049ae8df07794dc893d0b054

    • SHA1

      a224f36a24f671e9976a8ac958678aa49ab16b4a

    • SHA256

      73f446889e6455205fe87793117b3533a5ad636347de1dc62ac9acebb7cab086

    • SHA512

      5cca5838a3d5b3a3c6d94495625671f6e3d301d2c14ff08fd427fd2a20e69758ffc766979258f850e132c1b8b3f1748e809c186a5175a42ebca33c514f326f1f

    • SSDEEP

      6144:Zgdbeo7dxKGCNO7BTgWpsnvpyGU+0Rr8oobDQgw85Agb:adbPdxKGCNKThpsvpyXQR5X

    Score
    1/10
    behavioral13behavioral14

    • Target

      ptm_vista.dll

    • Size

      316KB

    • MD5

      2e949c7c162becded2a63cb250e201d6

    • SHA1

      fd4af82b0d78ce2dd3382699f94b50d5c1fad368

    • SHA256

      1445f0e948a5c06d393beab9290d454c2adf95dbc79f1e78f362e4eb8a3bbdd1

    • SHA512

      ef949e5b9665704f5a8ab2ddf1e98eabca9108e1bd3434a409ed9e745a4675296a36affbbb189aea60c196387170e28ea137b6a761dd21870532caf9b145cac1

    • SSDEEP

      6144:Jo3PTjtcL/u7qP6X8ZaXLNIqsA10uvEE0tTR+3jiSf9f142mTrEH5Py8:Jo/WL/u7qP6Xw6NIqsA108EE09SfJ14C

    Score
    1/10
    behavioral15behavioral16

    • Target

      ptm_win7.dll

    • Size

      316KB

    • MD5

      cc5e5581395d38f2176d86fa4ead21a9

    • SHA1

      fd8422c40872b022a880206249489a6e60fb957d

    • SHA256

      07d9e5b5ff4ea82651d8a7cdafd41c6e08af9b8949b2de403ab284b9c4b2cc3e

    • SHA512

      d004d045f0e5402d595441b54daf1c958da86931e8cf71e23f9e70f8898c3e155b48b916bb2255050c243bcebc1f081873cd64dfb6812c6bfbb6287b57e59e79

    • SSDEEP

      6144:oo3PTjtcL/u7qP6X8ZaXLNIqsA10uvEE0tTR+3jiSf9f142mTrEd5oy8:oo/WL/u7qP6Xw6NIqsA108EE09SfJ14V

    Score
    1/10
    behavioral17behavioral18

    • Target

      ptm_xp.dll

    • Size

      315KB

    • MD5

      3b2ef44436995cd38a02125c28d6b63f

    • SHA1

      105ad0c1e38320cbe4497443070c98334435cf9f

    • SHA256

      d0bc7e3b270da1794165a8bdc84c056d6216b384b189f92285736b9041c84d84

    • SHA512

      2c805ace213d4eb6f923247ba58bfd18ff0d34ea0ad4f0cb4a920d34899d0fb17605622932bd1a83e5d96bb26fde1101137708f74e23362155ccf5c9e6e1d54c

    • SSDEEP

      6144:BmhMc0jujuy8jkIHxJB/Mxnv6E7ULRiQbbpWxeQjbn5bMW7IY50:BmhIjujuy8zHxJB/Mxv6Erxegbn5h0

    Score
    1/10
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks