Overview

overview

7

Static

static

7

2944a5f345...18.exe

windows7-x64

7

2944a5f345...18.exe

windows10-2004-x64

7

$COMMONFIL...og.dll

windows7-x64

4

$COMMONFIL...og.dll

windows10-2004-x64

4

$COMMONFIL...m.html

windows7-x64

1

$COMMONFIL...m.html

windows10-2004-x64

1

$COMMONFIL...an.dll

windows7-x64

1

$COMMONFIL...an.dll

windows10-2004-x64

1

$COMMONFIL...fe.dll

windows7-x64

1

$COMMONFIL...fe.dll

windows10-2004-x64

1

$COMMONFIL...an.dll

windows7-x64

1

$COMMONFIL...an.dll

windows10-2004-x64

3

$COMMONFIL...fa.exe

windows7-x64

1

$COMMONFIL...fa.exe

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

$TEMP/updatesafe.exe

windows7-x64

1

$TEMP/updatesafe.exe

windows10-2004-x64

1

IEProt/IEProt2.exe

windows7-x64

6

IEProt/IEProt2.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2944a5f3455a7f20636d3436b3d621ed_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240706-xl893ssfqh

  • MD5

    2944a5f3455a7f20636d3436b3d621ed

  • SHA1

    00a91f3fce917621625e752538b952c1fa164a16

  • SHA256

    1ba98affea9e32b73e7d31dbdb580928ce63367f253d952508acb255b793ad94

  • SHA512

    5c43494b1b94209a1016e3ae92faeef6f32aa149aeeb17a8c1fc90c7320ad84d313131a2004dbbe5c0c8548fd429cebac71530720ab86ffa8eca0587dfa7fe65

  • SSDEEP

    24576:y1rVA0/c3VpdRx0ZjylvVzApHTU6yu8uakHfHU6:eh9ARx8yl9zGY6ymh06

Score
7/10
adwarestealerupx

Malware Config

Targets

    • Target

      2944a5f3455a7f20636d3436b3d621ed_JaffaCakes118

    • Size

      1.2MB

    • MD5

      2944a5f3455a7f20636d3436b3d621ed

    • SHA1

      00a91f3fce917621625e752538b952c1fa164a16

    • SHA256

      1ba98affea9e32b73e7d31dbdb580928ce63367f253d952508acb255b793ad94

    • SHA512

      5c43494b1b94209a1016e3ae92faeef6f32aa149aeeb17a8c1fc90c7320ad84d313131a2004dbbe5c0c8548fd429cebac71530720ab86ffa8eca0587dfa7fe65

    • SSDEEP

      24576:y1rVA0/c3VpdRx0ZjylvVzApHTU6yu8uakHfHU6:eh9ARx8yl9zGY6ymh06

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $COMMONFILES/Angels/AgLog.dll.tmp

    • Size

      298KB

    • MD5

      eac8960e017bd934b2009f6db2faf03c

    • SHA1

      709263b55e8002c9acde39ff48eb9b43486d5ec6

    • SHA256

      5b432e3255dc73277356571855cb782d3a376c9d2a77eec940092853b68319fb

    • SHA512

      2c27493d946f3696c200b3c8db9bb698a6d8e2dcc8ad94304ca7c34b5d4fd40c735214691dcd294923515831da818a482d4821d0e0b92d162b8734ba07c9e6e5

    • SSDEEP

      6144:BCv6QXUtiBav//wX4Yz0jfTc3B3QvZusUhm:IPi/wX4YzYfTchQhu0

    Score
    4/10
    behavioral3behavioral4

    • Target

      $COMMONFILES/Angels/IEHelp.htm.tmp

    • Size

      932B

    • MD5

      4e72a0d4ecf37f91b9fc9fd2e27a6661

    • SHA1

      c3e9117731947e1a3e2f9aaea9356cedf5fe53da

    • SHA256

      609471ce7403a914ef23d91082242c876e1b2ffcfcc6a70ab1309f45b387d1d4

    • SHA512

      ffc517b819c9e995f0aadef0583b099b16bff262315a9f27ba1c6306d0e0fde30c32ecaac19fdaf9584f182b64677699b42d40606f4038637485b2b5601d79bb

    Score
    1/10
    behavioral5behavioral6

    • Target

      $COMMONFILES/Angels/IEScan.dll.tmp

    • Size

      60KB

    • MD5

      bc790cfb3e358b55b841410ae2fd7fa1

    • SHA1

      2cc3e8d98279a5e730bce9b77b18d19d069c90ee

    • SHA256

      589c537d60dfb98c6fbb1d5a26c2ffed48ed3b6ce083e2fc0ff9f4d45f6cbed3

    • SHA512

      97de33fe680f8289fd3b2d761db345198278194853aa40e4c7fa58cd549ff3c55cb2178e0001d0fef74fd385c366a7b2cbb17c0622d955681b564bc5cfe87ee7

    • SSDEEP

      768:8Q0Uz/q4DHd5IytXGU1ZclADgN87Hra48fd+R0iyQpH/xL53+SeeKWr392LEUbG8:B0f4D9yYJlDgMgfdtyt/P+Cj924QG8

    Score
    1/10
    behavioral7behavioral8

    • Target

      $COMMONFILES/Angels/IEsafe.dll.tmp

    • Size

      517KB

    • MD5

      7335e548d8e41717465ace731f72f1c7

    • SHA1

      b468019912f943369210b195cd60116a773894ee

    • SHA256

      ac71d821f8616022f462db7cf3b4dda551bcbd6865c05f1795454ebb956d0e43

    • SHA512

      930a17548fcc75de600bb798ffa03944640e35dcddc3b61b22d725b36afd7d18590feb1193838a7e3b1ee5395ad81e6afe6d3698da821549be3c3ced4694830b

    • SSDEEP

      12288:IfpD/QT3YycROwCH7JrNxfhcfVuOfkY0Kqpx/25tbyoVmmjyHe4TBu1pJLRy:6sPrm++ou1p6

    Score
    1/10
    behavioral10behavioral9

    • Target

      $COMMONFILES/Angels/Scan.dll.tmp

    • Size

      1.2MB

    • MD5

      6891d3d4e9fefe584e758db70c0380ae

    • SHA1

      f79f700870f2ea2e37be7bb5569c5a035ffefe81

    • SHA256

      54e849e119904f52cfca5362290daa094544a569c13c9f5edf4806a5e0f611a2

    • SHA512

      b0e908d2067fdc579904c73d13b14d96e22dab546961a65dff867bd0e41acb3483e974acce887fb7586ddc42f33ee28f22369327b90c9a3c9e9c120b40d22e12

    • SSDEEP

      24576:TgcIwdCFEXGwz6Ff78H8KZ7SI7ErlB6azPTkkkkkkkkkkkkkkUkkkkkkkkkkkkk6:TgcIwi5nQ24EreytZ2ce

    Score
    3/10
    behavioral11behavioral12

    • Target

      $COMMONFILES/Angels/go114fa.exe.tmp

    • Size

      26KB

    • MD5

      be4cb0b0f6b6b2392e4df25ac7a1ab60

    • SHA1

      445d5b3ad9d14231caa5db1b2d899f37430a63c1

    • SHA256

      5b1a692e365eaa612e11e4f7161b2e2223b3f8171a18516368d646c16bd53e2c

    • SHA512

      fce748853a7f2e524f60c03b6587349c09211648978a9470c9980976b8830d0689a2876f60a6358f5dd8c5d886325b75ace982679ecaf6f9863a96d5d1a00646

    • SSDEEP

      768:JicxqkQ0OJQSf5Q4bDb87SSFAuJJ2m81LLEUbGNl:wcxqkQOYDb87ZFAuJJ2z4QGNl

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      31KB

    • MD5

      83cd62eab980e3d64c131799608c8371

    • SHA1

      5b57a6842a154997e31fab573c5754b358f5dd1c

    • SHA256

      a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294

    • SHA512

      91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9

    • SSDEEP

      384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/nsWebEx.dll

    • Size

      296KB

    • MD5

      cc329d5153c6b5949ee9dcedb12926ab

    • SHA1

      75744729739a8db546c08102dde407574d592a3b

    • SHA256

      0974e41b380a2e6fa080b04b7558d12e92d5d0885edf6025b7d0000201de59da

    • SHA512

      42b511bcbc639b6d6b3f657830a56c287d30a9ea0fbb5e63ec1db21bfcbd403a3fb3400f59ed94970fc4a71ca0830749a3f2a3190399c6e596413bba876a0b2e

    • SSDEEP

      3072:pdVMcUtREsBESl+4+dTqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5dnD:xMcUjpBrAnTqdKcS0Hwjl2JwbD

    Score
    3/10
    behavioral23behavioral24

    • Target

      $TEMP/updatesafe.exe

    • Size

      79KB

    • MD5

      a53ceb8b5a3d9ee90de6370432327d83

    • SHA1

      a50dbc458d2f29c6b83ea927211c49b87bb66358

    • SHA256

      57daec3419ce1e392341d343004a31f5fe474e728126ae78b0281098d523199b

    • SHA512

      c7eda4f87c6d1f91e27e7a38390972d056a2253c40439d65a39a8c995d2b8a56dc95c75a18825626d29fc65bebcc85e07bf2a0b2b191b259647b4865d015a8e4

    • SSDEEP

      1536:NgeIePh5nmOJ9R46UUhL8tc9/28hkl4O6VI/sQkMm+V4gg4QGa:NiQbvcqhL8i8sQkMm+V4gQ

    Score
    1/10
    behavioral25behavioral26

    • Target

      IEProt/IEProt2.exe.tmp

    • Size

      3.5MB

    • MD5

      574e54eefb0f53f7253429de9ab66db2

    • SHA1

      366721c3c21f9c0f93451610b5bf6a47a3fe488e

    • SHA256

      1479e16624a4934a5aac192236306f70cb011127ea6a8ecb1ccd79c1901526bf

    • SHA512

      305f7ffb4b53fc8ec3df1f13f6490dbac7c1758b80ac70bcda1d7fc06bf4cdb25b053c0356b5fd8bc7e17946366f6cc7ea7ffefec8f0f37260a264f6ccde0428

    • SSDEEP

      12288:cNRlV7wz+YrPM/MuEXA3KTdWghkXATZIu:cNDVaFKEXIK4SIu

    Score
    6/10
    adwarestealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral27behavioral28

MITRE ATT&CK Enterprise v15

Tasks