Overview

overview

3

Static

static

3

2e6154a88d...18.exe

windows7-x64

3

2e6154a88d...18.exe

windows10-2004-x64

3

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

1

$PLUGINSDI...ss.dll

windows10-2004-x64

1

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/nswg.dll

windows7-x64

3

$PLUGINSDIR/nswg.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e6154a88dc9d222e08178566a06de5f_JaffaCakes118

  • Size

    209KB

  • Sample

    240709-ats7hawhnk

  • MD5

    2e6154a88dc9d222e08178566a06de5f

  • SHA1

    67d954abd266edda1676301422e3cd2a9a62737c

  • SHA256

    fc0cbd446a96aa784fe6570104079b3f6197fd751bc59eaccfb29b7a5a62b4c3

  • SHA512

    1bc163d509e5a513e4ebcaa942891aea33c7eed7de17b9edab326e638e29d288cbcdb0891da48318829f306e2feedea364966ca3e2c43f21450539dedce6b8f5

  • SSDEEP

    3072:BQIURTXJ9nHSDAEc8OUW6D6/OP78vU8p48cKtgr8iRNydea+Lpc01e7ux7+57ax4:BsfnyAsl6/OP72U8m8cCK3Nydm0uxpx4

Score
3/10

Malware Config

Targets

    • Target

      2e6154a88dc9d222e08178566a06de5f_JaffaCakes118

    • Size

      209KB

    • MD5

      2e6154a88dc9d222e08178566a06de5f

    • SHA1

      67d954abd266edda1676301422e3cd2a9a62737c

    • SHA256

      fc0cbd446a96aa784fe6570104079b3f6197fd751bc59eaccfb29b7a5a62b4c3

    • SHA512

      1bc163d509e5a513e4ebcaa942891aea33c7eed7de17b9edab326e638e29d288cbcdb0891da48318829f306e2feedea364966ca3e2c43f21450539dedce6b8f5

    • SSDEEP

      3072:BQIURTXJ9nHSDAEc8OUW6D6/OP78vU8p48cKtgr8iRNydea+Lpc01e7ux7+57ax4:BsfnyAsl6/OP72U8m8cCK3Nydm0uxpx4

    Score
    3/10
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InetLoadEx.dll

    • Size

      55KB

    • MD5

      9fae574b1004bb0650eebba3d8040c59

    • SHA1

      541583ec14af05915b8efefe520edd4f25914c9a

    • SHA256

      73f4a1529acf2ea56d4db9ed8134bed0498cea38903105f7c2af8cc7d11b8db3

    • SHA512

      ab25c429301f2d8a2da6b7c2a222c4028ad8e393c67dde83606762a8ba49c6c49460538624a799969dd0b3c810623d7e471c65a390e8661228a621580d7d54c7

    • SSDEEP

      768:WFKaQrcF+ntygjX/+qEg469TRphsguCtPQpcQaa5jZ19K:WIaQrs0kgjx9TRsg1ox5H

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/Processes.dll

    • Size

      35KB

    • MD5

      2cfba79d485cf441c646dd40d82490fc

    • SHA1

      83e51ac1115a50986ed456bd18729653018b9619

    • SHA256

      86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7

    • SHA512

      cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043

    • SSDEEP

      768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Progress.dll

    • Size

      80KB

    • MD5

      15e01578481287bbcf32d2217f1b5246

    • SHA1

      67a7d05bb2f8b33980867d3352280fa0cd0b4e9f

    • SHA256

      61d8f9eba68cc6e2a83ec6d1689b2aa45e06bc32e13cdfcec8b593a14bc8bf70

    • SHA512

      9a83832faf20eaef5043f69d468bfe032d790274df25bae73bce4f7830ac83587d7e23dba531bff04951cbed67399386d9ea4337002a99d8cf61de3f8e33b674

    • SSDEEP

      768:WCFSITRx/imU5IBAczjPj+NbHHFJUzWwrhABjknWgiLLhfv09jaYhdb5P8mDnbK:+8xzUKBZo0zWWhskjiLwR/5P3b

    Score
    1/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/blowfish.dll

    • Size

      60KB

    • MD5

      926e4475c00fb5254c32c876921b77d0

    • SHA1

      8a55bc8b6e49021a4abbd441783c41d5e019798b

    • SHA256

      d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8

    • SHA512

      53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8

    • SSDEEP

      768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/nswg.dll

    • Size

      182KB

    • MD5

      4f2b563f712670211d0e932e43b6e277

    • SHA1

      53014306f362c90af7f58ad546237e6310e58fd3

    • SHA256

      9319a8a37139cbc5ac27e9f4c4583d615929a9ea681f5212a5f7bad07fcdbdff

    • SHA512

      414839a7e4b4d07d4f9c0b10ec708d12547b6866b9567383c0784abb77631a1b60e24a4d450980f8f6c97249b319150062566e12d44bd35b476f9f06aec66652

    • SSDEEP

      3072:EjcNKEYgmbSZZWxRw+LvCUDk7rkOFyCUQ9C4jO1wMPCxb5rw06w:JNMOWgmDk8Og9Q9C4jzMPCxhw1w

    Score
    3/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks