Overview

overview

3

Static

static

3

PipeCmd.exe

windows7-x64

1

PipeCmd.exe

windows10-2004-x64

1

hscan.exe

windows7-x64

1

hscan.exe

windows10-2004-x64

1

hscangui.exe

windows7-x64

1

hscangui.exe

windows10-2004-x64

1

libmySQL.dll

windows7-x64

3

libmySQL.dll

windows10-2004-x64

3

oncrpc.dll

windows7-x64

1

oncrpc.dll

windows10-2004-x64

1

tools/NTCmd.exe

windows7-x64

1

tools/NTCmd.exe

windows10-2004-x64

1

tools/Sqlcmd.exe

windows7-x64

1

tools/Sqlcmd.exe

windows10-2004-x64

1

tools/cygwinb19.dll

windows7-x64

1

tools/cygwinb19.dll

windows10-2004-x64

1

tools/mysql.exe

windows7-x64

1

tools/mysql.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32e8001b22842d3a47cd137b60c0091a_JaffaCakes118

  • Size

    695KB

  • Sample

    240710-cjq1hascjc

  • MD5

    32e8001b22842d3a47cd137b60c0091a

  • SHA1

    bc12ece424b87e88e9f7f8365649d55aa6c5df1d

  • SHA256

    6fd01e7c046a0dbee635b69f5457a6d62405fd16faa30b708b8ecf41847867fd

  • SHA512

    1b67d244face54acf04bcf607202157102df93a585d414426516d8b6f0d4873a2403a88b929c61a2854366f4803e8b73f00ab7fcd9d897cd714bfa6e3315abcc

  • SSDEEP

    12288:yXHubF8ELfKnAKfs36k40/PpzWFeWifBDTqUlblsB42KJoT2FZeXYaztppp:yXAXLfKnuKs/RzWFeWeZTqc5sB42KJoR

Score
3/10

Malware Config

Targets

    • Target

      PipeCmd.exe

    • Size

      40KB

    • MD5

      970078b1a1d69f05bcd3944eb96a16b9

    • SHA1

      64403ce63b28b544646a30da3be2f395788542d6

    • SHA256

      cc1dda48929249b701305faea3619036cba29007a6db2a9aec6b8c05868ab1e6

    • SHA512

      1eeb54f2b43140c659abe2f6b176e4aea0a0578cedfa21fa0c4011b6ab49eb129538a98adcabbbccc6f1004894a8135273dea15475240e688abbce1d75525c21

    • SSDEEP

      384:jzc/9NSRix4fULMWru4xxkO3KnUF/02m44:jzc/bSm4uMW1xGoKnUx044

    Score
    1/10
    behavioral1behavioral2

    • Target

      hscan.exe

    • Size

      128KB

    • MD5

      6263b67a59dad81aecae69276d265e1f

    • SHA1

      568b06696ea0270ee1a744a5ac16418c8dacde1c

    • SHA256

      7418d747940adba7a9b93dd8e3a9c470194f8e442983f129dd9f19431c8963b9

    • SHA512

      75d658a9cfc75e98b2c987ade0e19698a54d00e57c3618a54568341bef41192a9b2cbb53ee557035af89823cad8be60b0950eeb18fd6fe39b4f6a1fb7c7a44d1

    • SSDEEP

      3072:vuwdE4JQCqrdrjL5eUIzePrykrSoZj7B:v1E4JQCqrdr4UMePryE7B

    Score
    1/10
    behavioral3behavioral4

    • Target

      hscangui.exe

    • Size

      124KB

    • MD5

      42be6717898901b0dc245800a219a3d1

    • SHA1

      af8aced0a78e1181f4c307c78402481a589f8d07

    • SHA256

      c9ec10f0be2bc81c2f3703b9b258a55f662d7fd78e4be0c3e24a6f2502978ddc

    • SHA512

      4848f98f1a633cee19a38f83a11a35b5a18dfb9f0250413b1077c1dd38ab2305997a52b1d6eee78a862109f604fc1f24f2ff01badb3beabe11141bcf8e967ef8

    • SSDEEP

      1536:MP4EawbCxws7yDKZvB+Dk1BTqgM35r9zN8PZlmuMJYqOgvP3/QXL:YKZ5+Dk13+qP/yl/HvQXL

    Score
    1/10
    behavioral5behavioral6

    • Target

      libmySQL.dll

    • Size

      228KB

    • MD5

      5c82aa0811d81b4caf189bc70f59d86d

    • SHA1

      33552fda4d682ed39f9408e8bfb3c7fac9ee5659

    • SHA256

      68dd7744114dd579cf5748d0a8e27ac9e7c83ef7fa7245786630ec69a286c090

    • SHA512

      f23a7db670415e1bfd9b6d92ae65f427900696b4aa608ca236025f08f9f7e6ada397403fbb7b26796796edc55f351ea36a53eeb917e30aa80ab16e7fb6b242de

    • SSDEEP

      6144:E2liPBy0LYtmcn7Ce5GfeAHC7Qea/6Dnegz:Flipy0L2mEj5GG3a/Qz

    Score
    3/10
    behavioral7behavioral8

    • Target

      oncrpc.dll

    • Size

      68KB

    • MD5

      be32939c3ad523129d84cf35a4f9641d

    • SHA1

      e8f047eed8d4f6d2f5dbaffdd0e6e4a09c5298a2

    • SHA256

      43ad6f6fc581dabc73f5da8ea691281bd0a28a413865dcb353772394a28f3445

    • SHA512

      ed1ecb3d972a44dda3b720a7c4f56418908f83708fa926c39cc2998dd03da26d3c1303241d1288c748027a0db353a0670478093b4f04ce26c2f319e28c900fba

    • SSDEEP

      1536:6QqKkdcFLkqJhmR56ONl24Xf2FCDEt1eGni:7jgq/hOL24XOFyI3i

    Score
    1/10
    behavioral10behavioral9

    • Target

      tools/NTCmd.exe

    • Size

      36KB

    • MD5

      4a9509c2d86a6b782df2837506015a3d

    • SHA1

      a3ae8659b9a673aa346a60844208b371f7c05e3c

    • SHA256

      f38cf1ce798e6a12ade9c196356d30ef5c8eadc99e34503644b53774dd9a0590

    • SHA512

      9ead146bf5ae2d372e9d3f73d417f8ac8243c7cccc582c5448cdc77fd43879b728e9fd658769037dafd167f20340554127ea0b6e8f76f48efe6fa905ed1ac5a8

    • SSDEEP

      384:JZKv/OOfkqTBUS04GcGzDml2HBLnoOMamtvFPm06pV1nOrvB6gkyDm73oieVux9c:J4nOOVBUWVfamtvFIdnOrsjyux9o7

    Score
    1/10
    behavioral11behavioral12

    • Target

      tools/Sqlcmd.exe

    • Size

      32KB

    • MD5

      bd368d2021f80055e62882768250df92

    • SHA1

      99d56476e539750c599f76391d717c51c4955a33

    • SHA256

      5ceae85b375e516adb38bcfcfe082b3aef76ad18712e2ee7e52acee35c17eb43

    • SHA512

      c40795c456002747dffc774aa1f45a1e1922819d779a2b7595a1158dc56d9fe63658fe6c475a43d26adf79439ef161aa3afa6d13f1032f0f9d082ffb391091a1

    • SSDEEP

      384:Fn7rbyjQT1cSUJhGEhYmlS5eRysypg9qffx3GkAoZo+n:Br2q1c3MEl2pg9qfp3GPo2+

    Score
    1/10
    behavioral13behavioral14

    • Target

      tools/cygwinb19.dll

    • Size

      653KB

    • MD5

      d388339d43a0e83c6effd1de09a91c30

    • SHA1

      3988bddacf90569886a2505ec6eef8faf1c61df6

    • SHA256

      61f3bd4efe4de44664eea151202542f058e2e247e28dcea4e5ac810a73d251f4

    • SHA512

      83b61b44c20cabea1b7841d47a156e406f438023bbab4d35a9a90a1bff377da688e18841a39087c06182a2f0d428dd6b82783536ac99936d98f665fc1af3966c

    • SSDEEP

      12288:ZBcweFLCwKDMpvVEiDTf5SUd9aw8s+r53fMyPMh39coCtE:D7twruiDTfT0w8s+93bPwcfy

    Score
    1/10
    behavioral15behavioral16

    • Target

      tools/mysql.exe

    • Size

      326KB

    • MD5

      ab9e515e0368d649741859a2dde0d7cf

    • SHA1

      33e3f4bea31df01d67bdadf49b683670fdc04209

    • SHA256

      87adca958b90b161bd0358386fab5834cd34f12af111f09b827fe99c1c48b969

    • SHA512

      9537979bb28cb6449334759a0123e085d43c9e4b9c93b7276570d0e93bec2f463131ecc984a01acc7f483e629ba3958465f1d9fe53bca41658c0cca853c88cc0

    • SSDEEP

      6144:36Cmsj/XggGwiNUwhVM2T0QNAVAUS37bMcdJaVm+jUlASBaKcCP63zA0iZdlv66B:36Cmsj/X8BNUwLM2T0QNAGUS37bMKJyW

    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Matrix

Tasks