Overview

overview

7

Static

static

7

2cd8adaf24...18.exe

windows7-x64

7

2cd8adaf24...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...sk.dll

windows7-x64

3

$PLUGINSDI...sk.dll

windows10-2004-x64

3

jpborder.exe

windows7-x64

jpborder.exe

windows10-2004-x64

jpdesk.exe

windows7-x64

7

jpdesk.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cd8adaf24128b73307f61ed1396c7e8_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240708-svbmysvgqq

  • MD5

    2cd8adaf24128b73307f61ed1396c7e8

  • SHA1

    a1be821dda981e8fcda4f42d0ec2e3e9558f93be

  • SHA256

    cbde82f8ee60f20422b48b50056fcca87f30677a4feb96a0645350beddf48fd3

  • SHA512

    1916163ee00cb74705fbce9109a1940dd6ccf36f012ef293ac317497d571078ec8bb331db246e9c9b67dffc4fc9d042b1f1937fb931e4becacd33073f79ec906

  • SSDEEP

    24576:2w1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFK+Uc4eiIV4jVh4JgIz7SgCv:2w1dILPAX8ln6aB4WP3E29V8S4Dhg0f9

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      2cd8adaf24128b73307f61ed1396c7e8_JaffaCakes118

    • Size

      1.3MB

    • MD5

      2cd8adaf24128b73307f61ed1396c7e8

    • SHA1

      a1be821dda981e8fcda4f42d0ec2e3e9558f93be

    • SHA256

      cbde82f8ee60f20422b48b50056fcca87f30677a4feb96a0645350beddf48fd3

    • SHA512

      1916163ee00cb74705fbce9109a1940dd6ccf36f012ef293ac317497d571078ec8bb331db246e9c9b67dffc4fc9d042b1f1937fb931e4becacd33073f79ec906

    • SSDEEP

      24576:2w1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFK+Uc4eiIV4jVh4JgIz7SgCv:2w1dILPAX8ln6aB4WP3E29V8S4Dhg0f9

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsWebJPDesk.dll

    • Size

      303KB

    • MD5

      ee00c1bfd640df2ddd753e57bf3dda10

    • SHA1

      c4585dd4a9e8eb68a035b021ad06436fd3c48f4d

    • SHA256

      d464911f4a5b8488aa2e39fa4cbb1f98e24d30df043268573c0126be04d6b781

    • SHA512

      e4665c726ff1d114aeb04962332b3b27cf7fa952a4f29923ea0cccce209ede801466178e7442d0a2ffa7e8a69bb26b8ada24b7a98639d4137eda631f56cc65d9

    • SSDEEP

      3072:BivWsCitskrJiItRdykgT+WUqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk56:QCEs8J9dyPUqdKcS0Hwjl2Jw

    Score
    3/10
    behavioral10behavioral9

    • Target

      jpborder.exe.tmp

    • Size

      245KB

    • MD5

      d222c1373652293d98b109bd193e17d9

    • SHA1

      70b0e1499a18c7c00f14025119d3c00fc28a0b8a

    • SHA256

      4a7ac4bb094a846fd44c15f75f4d9e9d0f247beed2f4fce06fa318e68848be96

    • SHA512

      55da3c6d3db2a6633d939e9caad6c78e12d7f6790abb99d5f182e9d516519078aeee578e84e1e29e2943eb45d161778f7269852edac7d8ab070dfd245781e451

    • SSDEEP

      6144:KjRKscL0g8PTGWnhniYfQvTLwdWrF6GF04C:KjRKscog8PKbnjC

    Score
    1/10
    behavioral11behavioral12

    • Target

      jpdesk.exe

    • Size

      891KB

    • MD5

      915deb1929c49a34278783eaa60ac8c1

    • SHA1

      8b216d6bf4671795832ec521d0fdf08d081b4b81

    • SHA256

      137d23863a942bf3c366521bd32466d984185eef2fbf7afac28d70af21c4e39b

    • SHA512

      c21ebecde98ec5080ce74f21eeb54268d3ab915420f7a9adb35a6fcae56d6ff4858cdaf317b8bd44ef223afff971677fd8b9773b5262fe4d3b8071bc78864af9

    • SSDEEP

      24576:MyzvzD37WlLWJjl85F3Zq8bcQwIk681HurgOkDCmirJ4q:MSz77WlLWJjpEccToOr0Cmi4q

    Score
    7/10
    persistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks