Overview

overview

7

Static

static

3

2de2b4ba94...18.exe

windows7-x64

7

2de2b4ba94...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

DTDJ_1.exe

windows7-x64

1

DTDJ_1.exe

windows10-2004-x64

1

MemEditor.dll

windows7-x64

1

MemEditor.dll

windows10-2004-x64

1

MemEditor.exe

windows7-x64

1

MemEditor.exe

windows10-2004-x64

1

help.chm

windows7-x64

1

help.chm

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2de2b4ba949e2588ffcad28c1cd176ab_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240708-1fwnkssdrd

  • MD5

    2de2b4ba949e2588ffcad28c1cd176ab

  • SHA1

    698ee026203e6785f93791d24533a8deeec66ba4

  • SHA256

    ccd5051bfe3eb25b078a80b2e4452d88ee4731514d8347c2fdcaea9063366f61

  • SHA512

    adb374b102566ed94a362c3e1d5fa4e979dff342afcc0f2567480cbdcdde8b6a9d8a62fdd736af4740e7f9680874c332b59de1c152765e2f2e9a4fb436d9c54e

  • SSDEEP

    49152:qqlKVGr0lhrN2C2aMLCS1gdcZqQfAZ48jUR:qqlKV00DR2CCLNiGXR

Score
7/10

Malware Config

Targets

    • Target

      2de2b4ba949e2588ffcad28c1cd176ab_JaffaCakes118

    • Size

      2.0MB

    • MD5

      2de2b4ba949e2588ffcad28c1cd176ab

    • SHA1

      698ee026203e6785f93791d24533a8deeec66ba4

    • SHA256

      ccd5051bfe3eb25b078a80b2e4452d88ee4731514d8347c2fdcaea9063366f61

    • SHA512

      adb374b102566ed94a362c3e1d5fa4e979dff342afcc0f2567480cbdcdde8b6a9d8a62fdd736af4740e7f9680874c332b59de1c152765e2f2e9a4fb436d9c54e

    • SSDEEP

      49152:qqlKVGr0lhrN2C2aMLCS1gdcZqQfAZ48jUR:qqlKV00DR2CCLNiGXR

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      3KB

    • MD5

      9c3488b5e9655d1837c3963ecec33f70

    • SHA1

      f0fa9b4c29e75c6e4419c4633d09f2797aee2ef3

    • SHA256

      05ef4beb7fab9d04c1fb251874166fa2d73a34b4a7f2b145d37a2fd00c88979a

    • SHA512

      6af9f88d65d2279a71620f2a656062b1737b3a9a1692ed4e5887bdee891ce08d21c5c0b25ab3acbe6da9fe255dcd7f8a517c2751e73dc56add216740c945e4a7

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      b18dfaded8f6d2380fdfd8f6b6969211

    • SHA1

      969fa0e906240ab1123254feeb833c275626cf76

    • SHA256

      747d0222b652dbfc85e0de4f8486473662d325a55e32c7eacb91e53e37ceba58

    • SHA512

      25fb09b8657997d31e61c908f1cd08357c1a1b68bbb1ba377e87b6a3eb347a2ef96c1a771b6c4332853abb33728c55c83efa73df5da03f3dfc132f8a69a2886c

    • SSDEEP

      192:66JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTLK72dwF7dBdcQOz:66JaVh4I5rpPbTL+BdhO

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      9b17a13f814b137f88b961c087858063

    • SHA1

      c290dd3139b79aa340aec3ed3d674160433035e1

    • SHA256

      e54792a179a06acbb9b69c117ee804dce070505d1853d6e7d512f2a055a801b2

    • SHA512

      3a625f5f13e344c24973c79c074d1ced4d9206f87f392dc7c8f0c116d0f2b878b60340e2377d0240c47f0e34e25e4e3af8b196bbca1c6a29a0f51d8408e8b0ec

    • SSDEEP

      48:SnNQ/z+vUML8eYXICmlmGYKHz0JSpXSxwo6mpwzcR3RqG8aEJcABofgMGKO:Bz+MM4eqmvz0JScx56mpwzAhWcGV

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      810f3a0aefe36a9f63e29e604bea91a9

    • SHA1

      2559d3d4adf51f8ecbe2d07e669e344eb7d0bd80

    • SHA256

      f160eb7a1b4eb8d2e99e7424ae058acd81ba5019e43cbfa0ce81e3102b356779

    • SHA512

      836b73c38ab60260e1bc81ebf8347e14d02453fc361b7d6f10f137287b8189f8bc43758ce2d9def8fd1c71112aab7ef1930af2d64ae69f6d4e58a6fe17b310bb

    • SSDEEP

      192:CO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1argMO:XKAFERdlxhGRYUzqZar

    Score
    3/10
    behavioral10behavioral9

    • Target

      DTDJ_1.exe

    • Size

      2.4MB

    • MD5

      c16b21c4bfa8b5cc2dc66dee3d8d1718

    • SHA1

      8269b09cfae827fdfa06f72ce2339e963a5403e8

    • SHA256

      e4ca25fefc4bb7d81384a2e336d72870a973b3795479f185706dd6e8db392c62

    • SHA512

      283abe65919a278bbf49eb9e26c219189960701ecd4a5af4c862a50d60f5234bdb760c02f9209747b6708a04b45a5dfb3e8fb65c0c7a073242cc03f0ab1ee39a

    • SSDEEP

      24576:cAFITrkGIz36Q2sbIfi71i2HNtvjexqmTEC5Nn6b6cQiSH5REzwD813MzCuHby7V:cCwrkVLbL1frdCYR7SbHuuHG5Cy

    Score
    1/10
    behavioral11behavioral12

    • Target

      MemEditor.dll

    • Size

      354KB

    • MD5

      9c4075c45e39d3ad2ce3958bf4eaf509

    • SHA1

      c5ba0975eb93b5b5134d9d7dbbf0e502d5fd87e7

    • SHA256

      dfa2eb3f91cac9a50ecf4b2163beea8e9ba1a3f6bd3b9a2a931ef8ebfc30c0e1

    • SHA512

      6d47262b9d1aef1dc81036d55daa43f1948347e4f66820f2b2ce0c76409c486815c4b602f59d8463d72dfc0acdbc1371ffe769a743cb9432a94d7626d7534ee6

    • SSDEEP

      6144:I19/qadj7/V9+3kYfzDlThGP8czLpOYjt2nKtx4j1+:s/qadj7d9W1xIP8M8Y52Kv4

    Score
    1/10
    behavioral13behavioral14

    • Target

      MemEditor.exe

    • Size

      1.6MB

    • MD5

      c4fa9ba6a3679d569afb49ff126d8f8b

    • SHA1

      73c0ccbecf9b05b8e4b51db8b1ec69eda15d2702

    • SHA256

      73434dc7fc59a742fea5fb14d3d9f23f03e87c1c0a6215dfa170925dd38b122d

    • SHA512

      789a1a35f38a4d6bb189c34a20b54494a33c14976ebaea97390426e624d281310c954ead16a61aacc7cfca4f0d9156f889fae9136677b9107513aa74bb5e4a98

    • SSDEEP

      24576:1TEQzXn9SWNNjE6zdAiYesalI9aaJ144i6gzFxpHQmEI/cZkNn:1nN4AA9aoYnDx5QmEI/cZk

    Score
    1/10
    behavioral15behavioral16

    • Target

      help.chm

    • Size

      505KB

    • MD5

      a402ae8661b0de5038611f2c249efb6d

    • SHA1

      f6c470efe5a40daddec5170de069154970bd9dec

    • SHA256

      c156d478bd87abe2d3d5e24399d4360d1c98b36adde99ba4c15af5ab0313975b

    • SHA512

      654513003bc2f1afd5db9ef36a705a231b4424ecdd5562b66720c6cbe7c001925fbfa47fbfd7e44cff1ef6847db01c2b19e8c5409dce909fe20d1fd1f7439e6b

    • SSDEEP

      12288:Bftvwpio0MsQNziqNji8UeBUFqB4J86Lc:ddvo0dQbNjiy4qg8Cc

    Score
    1/10
    behavioral17behavioral18

    • Target

      uninst.exe

    • Size

      68KB

    • MD5

      932eff60a62b30fe12eb5188152d3803

    • SHA1

      eb1643e641fb451547d634972de127ca48ec1ba9

    • SHA256

      a5c1d73a44c8dfb61e7d4ec6b8f731dbc9903551495fdfaf74b7bbb4e54ea78b

    • SHA512

      ee127e5ca4a08dacf030fcc3c1e0312476c45165f9f0b3b6f5443d137a3e8db3ff139d715cd3257208ebf9957c276258e10e17ec3136a84e9473aa1d2e6952d3

    • SSDEEP

      1536:IRhoEXBpnbfRpQmJ/CrwXECy3lvUyS1vg3XTsJLYKR:IjJ7nbppQmJ/CrOEx1vE1vg3XTsJsKR

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral19behavioral20

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      31KB

    • MD5

      83cd62eab980e3d64c131799608c8371

    • SHA1

      5b57a6842a154997e31fab573c5754b358f5dd1c

    • SHA256

      a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294

    • SHA512

      91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9

    • SSDEEP

      384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy

    Score
    3/10
    behavioral21behavioral22

MITRE ATT&CK Enterprise v15

Tasks