Overview

overview

7

Static

static

3

49cb8966ef...18.exe

windows7-x64

7

49cb8966ef...18.exe

windows10-2004-x64

7

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$TEMP/PlayMe.exe

windows7-x64

3

$TEMP/PlayMe.exe

windows10-2004-x64

3

Uninstall.exe

windows7-x64

7

Uninstall.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    49cb8966eff77f732b40d852cb79c380_JaffaCakes118

  • Size

    148KB

  • Sample

    240715-pq1vha1emj

  • MD5

    49cb8966eff77f732b40d852cb79c380

  • SHA1

    5665057e803ccacfa8ca3facda766759b6cc9d12

  • SHA256

    24e851ab58fa7b4fa63262424f07afe86208c587d77762266a010daf5c40d9f4

  • SHA512

    fd33de81282014c865c453c793a789bcc05ac130f09e447544d78f987a988ffbf2df9ca566eb588881ebf4178ea8f18313c53137addb5aea7392dc4db5fc9146

  • SSDEEP

    3072:SPg729btBovpvw6RkMcXwcTaufYsy/nKTitKlWCDETIU:wI2F4hvwQJUfAsInqlNA

Score
7/10

Malware Config

Targets

    • Target

      49cb8966eff77f732b40d852cb79c380_JaffaCakes118

    • Size

      148KB

    • MD5

      49cb8966eff77f732b40d852cb79c380

    • SHA1

      5665057e803ccacfa8ca3facda766759b6cc9d12

    • SHA256

      24e851ab58fa7b4fa63262424f07afe86208c587d77762266a010daf5c40d9f4

    • SHA512

      fd33de81282014c865c453c793a789bcc05ac130f09e447544d78f987a988ffbf2df9ca566eb588881ebf4178ea8f18313c53137addb5aea7392dc4db5fc9146

    • SSDEEP

      3072:SPg729btBovpvw6RkMcXwcTaufYsy/nKTitKlWCDETIU:wI2F4hvwQJUfAsInqlNA

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      9KB

    • MD5

      0a58a89b32428fb848099f33e814e3ed

    • SHA1

      661b73c3ff3579eb9d0c482af7354ee0461634a9

    • SHA256

      aba4f462067f8c872d84c4c1ad6eaccf8bb6546c67c011964f8d2b62170f8236

    • SHA512

      1f4efa7183670f9e9bcf1be56b3165393a97da29080bf1353358933f0f2e0544706982059a9408639782163f4f05bc9d38fca9be110f7d3058f2b0e0017e8dc5

    • SSDEEP

      96:Y0uUUpZMb4pkXuzaVS1pZkrDSgPKqjOYiktlcyFBtsxwwAICZ:ipZS+zac+KdqjOYRcoB6xkICZ

    Score
    3/10
    behavioral3behavioral4

    • Target

      $TEMP/PlayMe.exe

    • Size

      90KB

    • MD5

      790a8d36746004f13bb7f7978c43a530

    • SHA1

      2b55413f9732ae9d6945f8421348ba8bfb4aeedb

    • SHA256

      d22557c3d0defdf899f6f8162d108975723640e883ad186aceb11631d62ca294

    • SHA512

      698ee549344deeb7033afb9806c84af85a401d406f742310317154af67ba9951863c9708e056625c0e73359edacdc924fbc18b38545609f1ce922a74bbe0405c

    • SSDEEP

      1536:txhP1vU6B/S7GHMBCyOrkQb7qM9AaOPfwKyOa14j:VtDCswvOpb7qPagc1

    Score
    3/10
    behavioral5behavioral6

    • Target

      Uninstall.exe

    • Size

      64KB

    • MD5

      abe7d5a186dbc15821b318f140fb459a

    • SHA1

      03eec628b900dd08395a5d19d6fc0c58cf556e4e

    • SHA256

      c94f2766a18692e210ecc78c5e96eff7bbe557529853f0b29c1bdef705fb90cb

    • SHA512

      45d8c2a4195f3d54a6dcd6a6493e54078d1b0f4a6c9203a553c1b217583ec9e9e146d0c0c93e1496b2a0e5f0bae8769e9b094e3052c7141eef252d5de04b3991

    • SSDEEP

      1536:SFYSF3bc72R2WbtjZTovF/AvSw6RkMc6j1J9HH:SPg729btBovpvw6RkMc2n

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks