Overview

overview

7

Static

static

3

2a18ce5d34...18.exe

windows7-x64

7

2a18ce5d34...18.exe

windows10-2004-x64

7

$0/questbasic.dll

windows7-x64

1

$0/questbasic.dll

windows10-2004-x64

1

$0/questbasic.exe

windows7-x64

1

$0/questbasic.exe

windows10-2004-x64

1

$0/uninstall.exe

windows7-x64

7

$0/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2a18ce5d34765eb89131ac64345fdb8c_JaffaCakes118

  • Size

    987KB

  • Sample

    240707-22nqjashka

  • MD5

    2a18ce5d34765eb89131ac64345fdb8c

  • SHA1

    c63c3ebd6beeb4657b45122cada1bed952af0297

  • SHA256

    5155ae0613ee9b199c736140c0b4bf609f4e407257d46610fb523ca52cbac278

  • SHA512

    95a69b7571c6727b47bfecb87a15be231f0306a896da55075b681a07e8b15cf8685cdc085029d2aa3715f2b9b55f6df85b3a16432708236b3dc5dc3e01950688

  • SSDEEP

    24576:py2Ua9DlDHX8/WP8DlaFgiQUh9RPi5Y1CzjAd:FUSFHs/QNQUhiFcd

Score
7/10

Malware Config

Targets

    • Target

      2a18ce5d34765eb89131ac64345fdb8c_JaffaCakes118

    • Size

      987KB

    • MD5

      2a18ce5d34765eb89131ac64345fdb8c

    • SHA1

      c63c3ebd6beeb4657b45122cada1bed952af0297

    • SHA256

      5155ae0613ee9b199c736140c0b4bf609f4e407257d46610fb523ca52cbac278

    • SHA512

      95a69b7571c6727b47bfecb87a15be231f0306a896da55075b681a07e8b15cf8685cdc085029d2aa3715f2b9b55f6df85b3a16432708236b3dc5dc3e01950688

    • SSDEEP

      24576:py2Ua9DlDHX8/WP8DlaFgiQUh9RPi5Y1CzjAd:FUSFHs/QNQUhiFcd

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $0/questbasic.dll

    • Size

      868KB

    • MD5

      24a0f4d466d5c4705a986cad086242e0

    • SHA1

      77a8c8f48c23dfd2ab0488073012ed74aa5c51b2

    • SHA256

      f4dbb6741147ff8a6d6fa38c39955a6c2762c135a99fe808b1c8a72d0a759504

    • SHA512

      8f174debe2abb2ee4288be71ca7a2dbaa55a5e6575ac54ff3c6b47ac8a30fa9c33a6d730991c8ba2dd8464fa4bd8b92c9917ff6c0142b81d6821e22993e331c7

    • SSDEEP

      12288:ibe6I5j1ZYQGpFycadb4Bi0BO2ooVItzBB0snXhiK81STDdu4/w8bFR/Ji6ZNpQF:RrY7pFfadb4FBOnoiiMD2STr/wAFlCw

    Score
    1/10
    behavioral3behavioral4

    • Target

      $0/questbasic.exe

    • Size

      22KB

    • MD5

      cffbdd959da2a4231016ff20f66883ee

    • SHA1

      aeb8d61b958cf0a37fb67d454d39f63d41bfdca3

    • SHA256

      5e286d90a5cb8a3164d095d9f7ac5d09a3dcd71794a1703603273cee7a0e91b2

    • SHA512

      e8adb8bb7ebc728f6c207ecd6d420a6c0a80f939f95d507cecadff92165d979cf9d887c51184425080a6acdd13f162cf250d8fc6808f0b755baa5449567cd10c

    • SSDEEP

      384:1YKbmt8kFG9iVR0JDIgPURCblLV5107wnq/zlmuY3vJml:Pmuunb0JDnFRh5107wn2RVisl

    Score
    1/10
    behavioral5behavioral6

    • Target

      $0/uninstall.exe

    • Size

      78KB

    • MD5

      90bbc6966897caaae7a3b0caaeb9ef49

    • SHA1

      966e6a404eb138d45eb82369fd08ce144c385d53

    • SHA256

      e34e24267d67366efe7c904e3a47bc8e04cab47221b8974ffab373f9b6e9fa44

    • SHA512

      5a39a00d98f931e637c5d72dc50096a9a8ff26d9ceb32435439f8d1ed46553e327dbaad67d47e84b17f638c5dd6611d9f74f918dd319006e2eb3c9e80e4cba9b

    • SSDEEP

      1536:PEkjY1zy214Qay0DGkJ7qAELVigJbDcpDCxH9TplS1N/RA2/Dj:8kjAJ4dDGkJ+AI06AuH9TpAN/RX/H

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks