Overview

overview

7

Static

static

3

38f8bf148e...18.exe

windows7-x64

7

38f8bf148e...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

1

$PLUGINSDI...er.dll

windows10-2004-x64

1

$PLUGINSDI...ro.exe

windows7-x64

7

$PLUGINSDI...ro.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/XML.dll

windows7-x64

3

$PLUGINSDIR/XML.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

BitTorrent...er.exe

windows7-x64

3

BitTorrent...er.exe

windows10-2004-x64

7

SkinMagic.dll

windows7-x64

1

SkinMagic.dll

windows10-2004-x64

1

UpdateApp.exe

windows7-x64

1

UpdateApp.exe

windows10-2004-x64

1

packet.dll

windows7-x64

1

packet.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    38f8bf148eb79d809fe1312a65320782_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240711-nvjw4svdml

  • MD5

    38f8bf148eb79d809fe1312a65320782

  • SHA1

    b6a4ea0f5d298ffaa9caeade1ad5c5e64292d715

  • SHA256

    8c42da25a2b1de27ed2ee529bc0b1e6c126baaddc10c8e9401aa7c3d0df63d50

  • SHA512

    981e450ea58c2dbde9c73c03219de246098b19b8302200a5eeb54adbfd1fee232f5da99e90617d30de9b6c5d94e4c5a4a01e5fed1f9e7d28ddf5f272092e45c2

  • SSDEEP

    24576:JRPNzbT1edf++lTJkFQhNxWpoA4YV+F8O/q0VJi/1NqH4eF7mGGN9kmd:x1wlTJHNxWZ+VS0VJi/1NqH4eF09kmd

Score
7/10

Malware Config

Targets

    • Target

      38f8bf148eb79d809fe1312a65320782_JaffaCakes118

    • Size

      1.3MB

    • MD5

      38f8bf148eb79d809fe1312a65320782

    • SHA1

      b6a4ea0f5d298ffaa9caeade1ad5c5e64292d715

    • SHA256

      8c42da25a2b1de27ed2ee529bc0b1e6c126baaddc10c8e9401aa7c3d0df63d50

    • SHA512

      981e450ea58c2dbde9c73c03219de246098b19b8302200a5eeb54adbfd1fee232f5da99e90617d30de9b6c5d94e4c5a4a01e5fed1f9e7d28ddf5f272092e45c2

    • SSDEEP

      24576:JRPNzbT1edf++lTJkFQhNxWpoA4YV+F8O/q0VJi/1NqH4eF7mGGN9kmd:x1wlTJHNxWZ+VS0VJi/1NqH4eF09kmd

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Banner.dll

    • Size

      4KB

    • MD5

      0116a50101c4107a138a588d1e46fca5

    • SHA1

      b781dce23e828cf2b97306661c7dad250a6aaf77

    • SHA256

      ab80cf45070d936f0745f5e39b22e6e07ba90aa179b5ec4469ef6e2cb1b9ef6b

    • SHA512

      55de6aeaad05b01a25828553d3ea9f1b32a8b0c35c42dc6106bed244320e3421ec6a6f5359b15f9d18dd1e9692ca5572b2736d9d48cceb07b9443601d00a5988

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/MobilewitchAcPro.exe

    • Size

      566KB

    • MD5

      9c4e9c3250820793320da7f10b71870d

    • SHA1

      06a06f2d716f773089455613e14f6757d06c60f5

    • SHA256

      f814fb9389012186ee85a6bb613f03f5fb5646b1faac33a755122dfecb0beb40

    • SHA512

      3a3daee92d59bedc78622940bfa72025ca3244ef3564349711b1117f631667e92136a562f83994075bd9e908e534abb2217dff8601dcfc94bd64a2cf52e32259

    • SSDEEP

      12288:mna9iuosHV56Tot2CIVgurymne2Q42l1/6tU4fi5roERzj6w:mnak6bswOeSYR6lUdVuw

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/XML.dll

    • Size

      118KB

    • MD5

      42df1fbaa87567adf2b4050805a1a545

    • SHA1

      b892a6efbb39b7144248e0c0d79e53da474a9373

    • SHA256

      e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845

    • SHA512

      4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d

    • SSDEEP

      1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK

    Score
    3/10
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      f02155fa3e59a8fc48a74a236b2bb42e

    • SHA1

      6d76ee8f86fb29f3352c9546250d940f1a476fb8

    • SHA256

      096a4dc5150f631b4d4d10cae07ef0974dda205b174399f46209265e89c2c999

    • SHA512

      8be78e88c5ef2cd01713f7b5154cfdeea65605cc5d110522375884eeec6bad68616a4058356726cbbd15d28b42914864045f0587e1e49a4e18336f06c1c73399

    • SSDEEP

      384:voJLJVqG5WLJgu/Emx1Ywxd2ZmX66vwUhU7ya4LC0Ac9khYLMkIX0+Gv8gcLom7:AJVkN8mHYwxdWmX3wUhUua4LeT7

    Score
    3/10
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    behavioral13behavioral14

    • Target

      BitTorrent Download Thruster.exe

    • Size

      858KB

    • MD5

      d39a43412253674541c78dfbaaed8eae

    • SHA1

      56c992641b9dcfbbfe5d93a84eb6824e6781f8e5

    • SHA256

      33e28d408774484a35bdeef145333a55a5744e17640ef40f005e1854c4f463f7

    • SHA512

      1a7eea2dad872a6ae50ba8913a3a239af16ba535dc0a9c8c271101faf3fb01a7b3d6bfe984da9af7a0a54b2334a0e6f44691957e6bd3c7e9903124f5610f6a1e

    • SSDEEP

      12288:bAxjl7mNyYA+7SAQAhin265WrY4GNFQzSQkfFjsaZb0aeUzlcUc/7:EY7SAQAhiH5WXvkfFjsu0ae4S7

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral15behavioral16

    • Target

      SkinMagic.dll

    • Size

      476KB

    • MD5

      59e53588f0a12d54bf1b0b24182d098f

    • SHA1

      857f40508d08dfbeb26afc46601cad32fe1414b7

    • SHA256

      886c9d39ace6e0d914cd97a1a1233be51c4a201c22f6cc4861e7c0d90ac895ef

    • SHA512

      4cf12296de0273cf715cc3f9997ca97afff2cbb58327b62735100e33f38068444aa90a99b77d756990a816a57ce5bc5a040e1db9c2e5944b01e4a3211574f049

    • SSDEEP

      12288:jTKUXiZ222S+P01CDDnrUyRo2d8x3Ti+CBis9T:ViZeNP0ofrUyR58x3FCis9T

    Score
    1/10
    behavioral17behavioral18

    • Target

      UpdateApp.exe

    • Size

      326KB

    • MD5

      656db181de0a89379af136de3d651229

    • SHA1

      83e57f44281f437e383445edcd5617a6bc17e2c8

    • SHA256

      68b9cf08eebf53aeb82a4fba84805d0f7d1771b72f87bade2c4880d5cfb8fb0c

    • SHA512

      c6d23a0c04cd4e03be5e3f120d9eefb0f4a664ba7994789007320e30c3e49cd6e4f59c656596a3e7c6d5abcd5494b04fdf1d079ed7245d42f23514f7b993a3d1

    • SSDEEP

      3072:w5ZytBlrzu2WI0OHzHtBlrzu2WI0OHz6TytBlrzu2WI0OHz:w5knzu2WITnzu2WI3nzu2WI

    Score
    1/10
    behavioral19behavioral20

    • Target

      packet.dll

    • Size

      60KB

    • MD5

      c123eb3439ae8ab13a971bb6f0515411

    • SHA1

      3ffa02b544b90433e816136e3bbffad0ca19735c

    • SHA256

      0b681d867089f44fd9c25a343b94b229b3d9db65d060c6c3767535a31e3eeee4

    • SHA512

      99f91d83d43dd73b6737dbbbf4eebf045d9e6a3f2a690210c67f363fa734d1a60b8b306798950668f80762798f52c7c2cfb65260766bbc5aced65ef306fb7aa7

    • SSDEEP

      768:ZPwRf6Bph61db4Ws71Ti/kZSC2pZplWsv9Q/OpKX:wZGr71TiYSCa4ilKX

    Score
    1/10
    behavioral21behavioral22

MITRE ATT&CK Enterprise v15

Tasks