Overview

overview

7

Static

static

7

22f5c3567f...18.exe

windows7-x64

7

22f5c3567f...18.exe

windows10-2004-x64

7

bin/cpau/cpau.exe

windows7-x64

7

bin/cpau/cpau.exe

windows10-2004-x64

7

bin/k2epac...id.exe

windows7-x64

3

bin/k2epac...id.exe

windows10-2004-x64

3

bin/k2epac...ib.exe

windows7-x64

3

bin/k2epac...ib.exe

windows10-2004-x64

3

bin/k2epac...on.dll

windows7-x64

3

bin/k2epac...on.dll

windows10-2004-x64

3

bin/k2epac...nv.dll

windows7-x64

3

bin/k2epac...nv.dll

windows10-2004-x64

3

bin/k2epac...em.dll

windows7-x64

3

bin/k2epac...em.dll

windows10-2004-x64

3

bin/k2epac...ec.dll

windows7-x64

3

bin/k2epac...ec.dll

windows10-2004-x64

3

bin/k2epac...id.exe

windows7-x64

3

bin/k2epac...id.exe

windows10-2004-x64

3

bin/k2epac...ib.exe

windows7-x64

3

bin/k2epac...ib.exe

windows10-2004-x64

3

bin/k2epac...kc.exe

windows7-x64

1

bin/k2epac...kc.exe

windows10-2004-x64

1

bin/k2epac...kw.exe

windows7-x64

1

bin/k2epac...kw.exe

windows10-2004-x64

1

bin/regsvr...Ex.exe

windows7-x64

1

bin/regsvr...Ex.exe

windows10-2004-x64

1

bin/startx/startx.exe

windows7-x64

1

bin/startx/startx.exe

windows10-2004-x64

1

bin/upx/NEWS.vbs

windows7-x64

1

bin/upx/NEWS.vbs

windows10-2004-x64

1

bin/upx/upx.vbs

windows7-x64

1

bin/upx/upx.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    22f5c3567f7177b19ff30a2540b7e69e_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240703-tgj8lsycjc

  • MD5

    22f5c3567f7177b19ff30a2540b7e69e

  • SHA1

    0c6b22471d83b4b43a791671621cb6b3ca6f0e59

  • SHA256

    387ae43099fee9234854e9c8ebe1b4ae42c22f5b952446334c6335587899deee

  • SHA512

    5aac19abd30db56771b3adb018b2cfc1c1006e71aa540200e26b0992eb6a4fdb49483696892e18bed29cf403518d3ade6fe41119bdfeeff6647adc7ecc877e56

  • SSDEEP

    24576:43ONoT1nTpwetGnhzxgvdrzSYYOITLGd/qFBwjVEkNkMG5GVvJFFHxqB7rsHZXOU:NmT1nTpPGnh2d3KfTs/qvDQ4YL+BHwZB

Score
7/10
upx

Malware Config

Targets

    • Target

      22f5c3567f7177b19ff30a2540b7e69e_JaffaCakes118

    • Size

      1.3MB

    • MD5

      22f5c3567f7177b19ff30a2540b7e69e

    • SHA1

      0c6b22471d83b4b43a791671621cb6b3ca6f0e59

    • SHA256

      387ae43099fee9234854e9c8ebe1b4ae42c22f5b952446334c6335587899deee

    • SHA512

      5aac19abd30db56771b3adb018b2cfc1c1006e71aa540200e26b0992eb6a4fdb49483696892e18bed29cf403518d3ade6fe41119bdfeeff6647adc7ecc877e56

    • SSDEEP

      24576:43ONoT1nTpwetGnhzxgvdrzSYYOITLGd/qFBwjVEkNkMG5GVvJFFHxqB7rsHZXOU:NmT1nTpPGnh2d3KfTs/qvDQ4YL+BHwZB

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      bin/cpau/cpau.exe

    • Size

      162KB

    • MD5

      8d2242c108d534765c86aad2c6662b0c

    • SHA1

      e75321bdca2ec0c40145cd069e682d904d2067e1

    • SHA256

      d8e3a33b45f4db5c242967c035600062ba28264262e42b023915760464224cbc

    • SHA512

      bc241276f8cb11c000591daeb6c897112524b51ecd7c6620405390e1e25b4ace4f254b65e434d4b963516d0056a19ae64ebe4fd250b9c78061a8222519e43b93

    • SSDEEP

      3072:g6n1elcxyQ1Em/dnVBB14Ix4ig0cBqYPnAxAYIpiKIqK//Qq:bz5Eednh1ZDsRPKIpiK3o

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      bin/k2epack/CStubs/lzma_solid

    • Size

      23KB

    • MD5

      95b7f491af8b3214697683f9f330b1c5

    • SHA1

      20446144b6aff223f8f5ffb95db409026eb3b554

    • SHA256

      e76a6e0402116d93e3f6f5a95d3f52ff87bb80468a0db0437f6e3a606f90d84d

    • SHA512

      52f5be26a0e9a0bfcd40b0b722a172a2bfb63607ac8c2a2e2d025a750d15e3810d9b4cbbaea4405f9a2c56ada31b8deed47b3ab145727fa8469f7bc2241354a7

    • SSDEEP

      384:ns4y4zEUkSTIpgp4nDCd+PZ4A+aqfPpYX8yunfGQfQu/49a+AgqvHiZdJb:n7y4zE7SP6DCwCaoGEw9a+3GHWdJ

    Score
    3/10
    behavioral5behavioral6

    • Target

      bin/k2epack/CStubs/zlib

    • Size

      24KB

    • MD5

      b8e422e089e4b7d0771ba1901b799674

    • SHA1

      a1f08ba64a4cce95255c05f8d0c74800fde75887

    • SHA256

      93c1f3fa41ef884972b662c399938dcc81b87475efcb1edafc8363ac4f14d05b

    • SHA512

      eca6bfb633d6232f411402571e9c1c385aeee9c502e9a842f0f180170f53a2824dff4914c078bcda37be41d2051d0e3a02985c4488866416b3217ecc9a682400

    • SSDEEP

      384:oSAIyjzqn1lBRIrEr7+oc2YmcPyQuk0+ulxHS8nfGQfQU//9abygAgqvviZdJj:fnyjzIpRzrg2YO+0bGGH9azfGvWdJ

    Score
    3/10
    behavioral7behavioral8

    • Target

      bin/k2epack/Plugins/NotifyIcon.dll

    • Size

      5KB

    • MD5

      9ab83d7ef9bd55db63ceb33840431cd5

    • SHA1

      548c54c8b9d683f32b2f1bd8b3f374fc14691fd4

    • SHA256

      d2b04b5b33877521f6f140148521f219e25d2de753ff20954f90dcee55d1a647

    • SHA512

      5fbceba72421834d5b888818b1fea5f88c518ad871539a3ff1422d4a3e3d6bb945dca1da0839158c446e54cdc5c916e1ca17283b44135d2078bb1188ae142545

    • SSDEEP

      48:aFV2n5RPl5A9+DyhKqfCdGMfMGMoTtmZE+dlpn6sT6lQQAsjRz:s05RP72BCdjUGM4R+dHn6tV

    Score
    3/10
    behavioral10behavioral9

    • Target

      bin/k2epack/Plugins/SetEnv.dll

    • Size

      2KB

    • MD5

      8cea792f72b22fc0874d8bf107c0bde4

    • SHA1

      9953b4398d9a46a47270ffe5b79208478c365525

    • SHA256

      283a68ad726e9f2170d0f26f13c846efef41c293aaa89db6f901f5f4cd865983

    • SHA512

      0a04f3038c3d4ddfd3a6bbe0ce5ed18d1fb937de7a65f24208c50ed9f0107e0d53498cbab7634c1fa3e92326740f7647c44e58161f9821d63742aefbd9d2f79b

    Score
    3/10
    behavioral11behavioral12

    • Target

      bin/k2epack/Plugins/System.dll

    • Size

      10KB

    • MD5

      2596562540f8f2b7b74448736b2c469e

    • SHA1

      b0bdb0ff59441a332309dda443060368bb578c32

    • SHA256

      50085fabf2971aaf2c5a5c33848ca0df812ec1681a8ec0b468d892061b1dfd33

    • SHA512

      000701c5fd8829a3fb9fa4479dcfa3f77b024cd9b29646f6bdebe72357f1d806bf097d36c30bcb34cd24cdef1ddefc36df19c7ff8d3be8e330e760c8cd5f484e

    • SSDEEP

      192:AxrTmmTgyuMWBw8HsuU92hSD4OU0uNq2s8xIGA+:AFTp+s1wOU0uOGA+

    Score
    3/10
    behavioral13behavioral14

    • Target

      bin/k2epack/Plugins/nsExec.dll

    • Size

      6KB

    • MD5

      4ad87730940d1031b84a07fd9414cb5c

    • SHA1

      0cb8d98b915206131d036b6898c2e4793d64891f

    • SHA256

      87be9e03fce817bb8567e03d6ce89aba15ec8cbdb2c6d11161da393ec0c876ad

    • SHA512

      939accab06c5bcbf9ee1cb2e6764cef65d5ec089e7ba3f461cb95749faea9ce21e2085d7f1c9740d2d65a72fcc5b47cbc3646fdcb1cc402c917ab5807da18749

    • SSDEEP

      96:iXMt8WeUBhgiVhCnzC/Fjgz+GWrhKf1hhUHlYInN5SM+L9IWdFyVPNKI+:lpBhgwhQzCtEz+GWs9hkOmMVd8VPNm

    Score
    3/10
    behavioral15behavioral16

    • Target

      bin/k2epack/WStubs/lzma_solid

    • Size

      20KB

    • MD5

      ab8dda5ef481e6ff7dd7531b1247db1c

    • SHA1

      2def4a6d29f8684836de388a9da7673f4634c8af

    • SHA256

      bf27c16769781d8a99a56c547110f0561688e5ac22a9739b1500dc800cb65806

    • SHA512

      f50a4384bb1a38e1c05bc843c95a2b53d6f68df6ec52eb00ebeacc791a506b3f02d67c53233172d7ebf233530c0d45b7b293edf7770d96c8a51bfbbb47ca9d5a

    • SSDEEP

      384:6T49rsikMZDcGxxdPoZ6DS8CpehOPn4pYmL/UAgqvkZdJZ:6sih2oUdQZ4xwezp83GUdJ

    Score
    3/10
    behavioral17behavioral18

    • Target

      bin/k2epack/WStubs/zlib

    • Size

      21KB

    • MD5

      649f12d5bf384f685643a01d899cb4d8

    • SHA1

      64cf53011de135579f362bec753a9d7029eabae6

    • SHA256

      d729eb2ebca742b6a59ccb16b5465f8c510f7b5d02f82c58b11e74288e8642b0

    • SHA512

      4f3cf534399f7d2b789dcc241208b394fa79ed7a69b42f24d57f2267ac4c2fface6e6bffd2a00fde80a3ec2cc5d0cd31cb5a5394e803847212780279796680bd

    • SSDEEP

      384:Bx4JUFSkEMZJZwct5PgCERzSbYMtv3UPkhlw1WxJ1p/dgFAgqvcZdJk:BO4RrZJZt5oCEhSEMtv0UNpKFfGcdJ

    Score
    3/10
    behavioral19behavioral20

    • Target

      bin/k2epack/k2epackc.exe

    • Size

      371KB

    • MD5

      69d7ef17b3690338e6c96de27464b3fa

    • SHA1

      c5e9ebd10b636073b1f57e52befe782e87e2aa4d

    • SHA256

      49cc01e1c0d934c47c4e02ad2f022a5644561fcb02dd5699c230a0213ab85861

    • SHA512

      79c8ea45b288da0b1c0658070f75e75fa47f3e1e17f5dcaed6cfe42baa2466f96b0ba10992600ad1c9506bf81647130afe41cac7b984d816eb7e568359f2954c

    • SSDEEP

      6144:Gt2eNndo9D/VDr3e/+9VJ88oCX3HKNPjKMz/mF/eCKW+Zj4EqMmCXxaHnfpTrCjY:Gt2eNdo9D/VDU+9Vu8oCX3HKNGD/eCI4

    Score
    1/10
    behavioral21behavioral22

    • Target

      bin/k2epack/k2epackw.exe

    • Size

      371KB

    • MD5

      caaeb163c77eb35c3c0a6b073e8b99a2

    • SHA1

      988f5eef1a62819cb476fa3e8d1da3f0c2ddb0e6

    • SHA256

      fb3e088dac8073290ed9509e3c402bb4e96940b33451225a6299facb432563d1

    • SHA512

      519218a1f873cc8cd8c3ef0ca03467590577079aba5b6a81154f3bcfdaea731bfcd3c82d50f2af272642b6fd1e7d66ae36734832b74e1f9d4ec4096a334238ac

    • SSDEEP

      6144:qj56eBkz5ynWbPBY0etFBekrDoUlM8GBepPnvFIu716iLnczZkB0J2u4ZzrejJ3Z:qj56eez5ynWb7etFokvoUlM83FIu7fLg

    Score
    1/10
    behavioral23behavioral24

    • Target

      bin/regsvrex/RegSvrEx.exe

    • Size

      5KB

    • MD5

      31b3d120241f55b404218d4f89ebb859

    • SHA1

      55c56404ddc9fa21d9e10fa69b59db8ea773ada8

    • SHA256

      77ecf626e052fc2303c2ed0bfdae94a94ffe9e7f4928683024808059ac54f3d5

    • SHA512

      24be541079a9cd421a27b3e1ab5d2f54fa6672bca46ecb1e63d13f072e28b5b0f7c0231b3e049229b9d4d570355acfde05eee388ab2d14f2318ba7e953117243

    • SSDEEP

      96:H7oOuOgLHwLns/QR7ZikUAI4JC6qyciiSE/Z3:H2OQwA/QR7ZikUAIVl/Z

    Score
    1/10
    behavioral25behavioral26

    • Target

      bin/startx/startx.exe

    • Size

      164KB

    • MD5

      95574b0019b2d0b140cffba809ea60a3

    • SHA1

      4e9e043f3f59dd930db51be1452c058afdceb9e2

    • SHA256

      c59ba5e5c07189b818989f9a8b178f665cfd2c1e46a3fee17aa2b096dc5a7712

    • SHA512

      42a04a2801e51cbd73f5f8499c2e567a03d3ed49502eb14c668b5c30874d270b363657c93e0b5f6f1606c7cbfe43d3a136d708fc8ee775663005321bc150721d

    • SSDEEP

      3072:JG+7TpEaMpmSUuhzBga0sW1lLN4nOoMnMdV:JGMpaUaBgVN5

    Score
    1/10
    behavioral27behavioral28

    • Target

      bin/upx/NEWS

    • Size

      18KB

    • MD5

      e4b59b9a2ba0e3541d4f189981f5f0d5

    • SHA1

      d06fe28a1aa7f4f04751b7076d98551bf914058d

    • SHA256

      dbfb87687a92334c04f2e601a96e545478159867438c4d3ad182f2b3926c60b3

    • SHA512

      aecd8c7fd3af975ae3158130c5a3c6d8075c72fb091f721216a5e4ff7119be1e8a0245272f06520f2daf62343d34d7164ba7908d3c03adbcb6c86fd758d61e72

    • SSDEEP

      384:RSyzeZ9SuqxGzgle7SGj9mFybwruza9CoVD1zhyNhzrdaI1yCSshCFwBV:G94+q7TW+VxzkhPdwXy

    Score
    1/10
    behavioral29behavioral30

    • Target

      bin/upx/upx.1

    • Size

      42KB

    • MD5

      25f2e346f8ec5a21785a47afd54d4803

    • SHA1

      a3c70b03ccdfe7ea1926655b8a120bd44067ea40

    • SHA256

      09d1acd721ad92d04d3f4e9d30a9ccf2362ec6f811551764eec7c03892187a96

    • SHA512

      834caeaf71b12120a5d323549558b0b84b6adb3875c73aedb1126106e41aeb11d37ca19e80ca77dbf1f462cdb0cbf13c2f55adc071512ac2b131b6cc4d79c842

    • SSDEEP

      768:WMqVcKeWbuUmVs3CPGak8LKkIWmHkrvapDJ1AwUkjkCUkj+MTcWRVy8jt8t95B47:AcKtbuUmVs3CvBLxrmHkrShXbxjkCxj9

    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks