Overview

overview

7

Static

static

3

19c667e4ac...18.exe

windows7-x64

7

19c667e4ac...18.exe

windows10-2004-x64

7

$PLUGINSDI...am.dll

windows7-x64

3

$PLUGINSDI...am.dll

windows10-2004-x64

3

$PLUGINSDI...ew.dll

windows7-x64

3

$PLUGINSDI...ew.dll

windows10-2004-x64

3

$PLUGINSDI...id.dll

windows7-x64

1

$PLUGINSDI...id.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

1

$PLUGINSDI...ns.dll

windows10-2004-x64

1

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDIR/Kill.dll

windows7-x64

1

$PLUGINSDIR/Kill.dll

windows10-2004-x64

1

$PLUGINSDI...LL.dll

windows7-x64

1

$PLUGINSDI...LL.dll

windows10-2004-x64

1

$PLUGINSDI...te.dll

windows7-x64

1

$PLUGINSDI...te.dll

windows10-2004-x64

1

$PLUGINSDI...ta.dll

windows7-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/stack.dll

windows7-x64

3

$PLUGINSDIR/stack.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19c667e4ac9cd9c264c3959a9ad63230_JaffaCakes118

  • Size

    205KB

  • Sample

    240628-mewqasxaqr

  • MD5

    19c667e4ac9cd9c264c3959a9ad63230

  • SHA1

    98414bd2b2b17532b2266235712b5676d1b5e9d0

  • SHA256

    ccc75ee30e31cdfe33c78d3dcd68a9a766860878e467eff42211e4ac629f4e0e

  • SHA512

    efb166a8b917103ada4684ecad9f7a111d86fd3e7bb5304b59eaa0ee57ead688024893fc3200d6a962bd76289acf78738b099ed3a253576564d025ba31748ef4

  • SSDEEP

    6144:4e34Tb/N8grWyS/36rFF5pLvnVAsvp1EUXZgrOsqYLCd:YbqyK3677VAszEUJVd

Score
7/10

Malware Config

Targets

    • Target

      19c667e4ac9cd9c264c3959a9ad63230_JaffaCakes118

    • Size

      205KB

    • MD5

      19c667e4ac9cd9c264c3959a9ad63230

    • SHA1

      98414bd2b2b17532b2266235712b5676d1b5e9d0

    • SHA256

      ccc75ee30e31cdfe33c78d3dcd68a9a766860878e467eff42211e4ac629f4e0e

    • SHA512

      efb166a8b917103ada4684ecad9f7a111d86fd3e7bb5304b59eaa0ee57ead688024893fc3200d6a962bd76289acf78738b099ed3a253576564d025ba31748ef4

    • SSDEEP

      6144:4e34Tb/N8grWyS/36rFF5pLvnVAsvp1EUXZgrOsqYLCd:YbqyK3677VAszEUJVd

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/DLLWaitForKillProgram.dll

    • Size

      28KB

    • MD5

      9c4b8ec42d89f7557bfd90798ce52787

    • SHA1

      2376dde426ea65aa27c30e304086310605382475

    • SHA256

      ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548

    • SHA512

      17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7

    • SSDEEP

      96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/DLLWebCount_new.dll

    • Size

      28KB

    • MD5

      f16f5feebd9b431a8bc63456c0ad267c

    • SHA1

      acc75cfa3ed7888334aa2ccf305a6c6c58a08aaf

    • SHA256

      5417af0fc8284e9745650a55803bb34217e314096dc7cedf113c960624ae08ad

    • SHA512

      ed1e62d903b511a29abd5def4419b5afa63699ee2d1c91a9d884ffb01d7debe5981559574cac4885140d1f27f4275be56236f5c6f1c327147dcac8893f965512

    • SSDEEP

      96:3YP18J49uJPeaFX/0gOtJ/9nMjbnbk2Zl1bU6i9vtmAuSBudGaTA:3f1bFX/rOtJ/lMvbfJU6snpYdb

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/GetSid.dll

    • Size

      88KB

    • MD5

      b820c51a5ada0e16d7d1285b26440c82

    • SHA1

      5e4cb96cb2d92a0df9f259b99ded953974926263

    • SHA256

      57c97302704da7b47d24e88e06ff6001c3f5d35463bb6b3ecc283b24bd30643b

    • SHA512

      ffb8824def44e0767992a2e415e8695ebff71e8d7f740ea0864ab773c63f44060e947f5c2c7dc8cb1b0ff2861dafae22a708240dea92159e0b98edc2f6a120c7

    • SSDEEP

      1536:ibddSkCTEl0ZViN8U4fduuJlbAlbFZsbH:/W0ZX6OlElHmH

    Score
    1/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/IEFunctions.dll

    • Size

      3KB

    • MD5

      9701818d39318145dd164794ef3a3846

    • SHA1

      7db701f8dc19163d46ba88e8b68d8dbf428a8152

    • SHA256

      3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a

    • SHA512

      d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4

    Score
    1/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      eef9e469e8a30717974499f277d97e2a

    • SHA1

      2d33c25984ebd9116beeb55cdde4c5c86c023e5d

    • SHA256

      1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078

    • SHA512

      d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48

    • SSDEEP

      192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/Kill.dll

    • Size

      44KB

    • MD5

      76e1dd09f4cf438a245c3f0281c4175f

    • SHA1

      85480e3bf7e23cc9b9c0d25797f6aa0165857639

    • SHA256

      7b17f4bab6da791fea17760a55a845c8336f204c86a1403e5eb8f166df4c340a

    • SHA512

      6d7ecb29213287b4048c88ee7b414eee4e5a815a7545a2dd03f565ae5d748626ccf02acc78231bc47ffdfa7186f309b890c34d20cf5ad112d35cca34db136884

    • SSDEEP

      384:Ye3If6T5WyP8cb+JNQKSeVCj37K+BBOENoy5JY/GY8Au/+cA/8ovtruXRRS:kCT5Wwl+rfVS3JvoA+GY8Aj/8osX

    Score
    1/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      36KB

    • MD5

      6958016193a066833556992077bad4fe

    • SHA1

      5f564945936f99381d7e2408f034f97d069005a4

    • SHA256

      f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e

    • SHA512

      fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7

    • SSDEEP

      384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l

    Score
    1/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/SelfDelete.dll

    • Size

      24KB

    • MD5

      7bf1bd7661385621c7908e36958f582e

    • SHA1

      43242d7731c097e95fb96753c8262609ff929410

    • SHA256

      c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e

    • SHA512

      8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f

    • SSDEEP

      96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr

    Score
    1/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/SetHoldData.dll

    • Size

      96KB

    • MD5

      e86d36c5332858061cc519e7bb558f39

    • SHA1

      8114e43152797296ec1919b1c713ebada661ca51

    • SHA256

      4c8869ff8cbdd2f9a6a2d2876194869664d0e3f554886451224ff4e732136365

    • SHA512

      46bf19a71fe2ae4d61084bcf406604e2f375c92f5de1a5e9a6eb857424eb4dc82e70ae7099aa3676c518960f78a17dafa05c23e5283954e43f44190391662ed1

    • SSDEEP

      1536:WLWIcTAacVyVg+h1hT9Uh+uQNIIhVQoJadWytgYT+j:4TlCg+h1xr9IIh+oJadrb

    Score
    3/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      cdff6b8f9523b6ef9f20fb5f9e90f1a5

    • SHA1

      b25f6e0a19b41ff0a12de8e98e3005bc119d34fa

    • SHA256

      80b2740fb3a21ffab022a96ce6b420019072f8ef3a048fd9dea4a5b64498c0c8

    • SHA512

      62585c6a6103aed10f9a79c016df8cb630c3e37715542b5f26aa1a910771540c9b323ddbba3329db0ecf524143f7a27b782e198ce944317f764be6b9d04b792e

    • SSDEEP

      96:W7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3trCUTMxVXw32E:IKgfwgcr8zylsB49lrCUTMxVX7

    Score
    3/10
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/stack.dll

    • Size

      10KB

    • MD5

      0f61a81a543822de5fcb9a8a43f230dd

    • SHA1

      d01d4a0f542f3c654637fdfe5a574fe1f150ece1

    • SHA256

      46b4a72ae8590b0afb3304cc5c13db0502bc4c4cb02f64f37c79008c17db814f

    • SHA512

      596b7a897ba64c32e26ba6168aa3628aad37b187a9814a286298307d8c42eabf8e8a679dbda558f8b2cdc8676c94ec819256432aa5ad7c05a5387759262a4402

    • SSDEEP

      192:VBEc/BwQV5gTRk6uIu8uQubQuNu3fufuXuPDyuSuFujournu6udkuUuw0y9UrVo:VBEwBZmx97TSefeC/zIqoInvEkJ8y9x

    Score
    3/10
    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks