General

  • Target

    49fb0b09ede15057d5d9976f708dc7e5_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240715-raenfawgrh

  • MD5

    49fb0b09ede15057d5d9976f708dc7e5

  • SHA1

    ba0f6ecf32a8d28ceb60fcba6e71fc67671c123b

  • SHA256

    bdc10f5277b0149dbf7bced195a8737ddf119c0aa0333ecfd8467495a8cacbb0

  • SHA512

    d71419233a312e0b79622476b7a9d98d0fe8602b3f97807bc6064d2b71ce951e2178a2a70bfe70eec9ae72e3bb6c26a02ad2c643d3d19fbfece95d1739d2a878

  • SSDEEP

    49152:ElJy8JwdRFr9dCYE93RDKJ3mSawCD671s9pSZt:ElJy8JpnKwQCeC9Mt

Score
7/10
upx

Malware Config

Targets

    • Target

      49fb0b09ede15057d5d9976f708dc7e5_JaffaCakes118

    • Size

      1.7MB

    • MD5

      49fb0b09ede15057d5d9976f708dc7e5

    • SHA1

      ba0f6ecf32a8d28ceb60fcba6e71fc67671c123b

    • SHA256

      bdc10f5277b0149dbf7bced195a8737ddf119c0aa0333ecfd8467495a8cacbb0

    • SHA512

      d71419233a312e0b79622476b7a9d98d0fe8602b3f97807bc6064d2b71ce951e2178a2a70bfe70eec9ae72e3bb6c26a02ad2c643d3d19fbfece95d1739d2a878

    • SSDEEP

      49152:ElJy8JwdRFr9dCYE93RDKJ3mSawCD671s9pSZt:ElJy8JpnKwQCeC9Mt

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      b21538d9f049d3e3e8b666744d7ca36d

    • SHA1

      b97fc58f9aa238758a7574a2e32dac4e97392f47

    • SHA256

      9dbe958fd425903ffc2197a112bec4fa597284f9637fe8fd5685016f32e21334

    • SHA512

      05d2c660a43519fd35daa3b4310419b33e61ce8557bde55942315ca59c3b9cb9fdeaea42c403ad78a54fa9923eaa712bcf5a10dea83619a18c4ef0c451e6d533

    • SSDEEP

      192:ROSsJI/rqmIDNLU0dq51EgAiNbubv6xLZ:/HQQ0d01Egbq76x

    Score
    3/10
    • Target

      $PLUGINSDIR/ext.dll

    • Size

      46KB

    • MD5

      96d5570163482bcf43bccb692f608ed7

    • SHA1

      258ba09c245df06ae03108f87b92ea27a6af14e7

    • SHA256

      d2015d65faf8366a204eb62b38bdf287abe768412c88e85fc30793f9bd14b371

    • SHA512

      63036465b1af15366cfb47172a7c636ee39178a5e7e75b7cc2a8d64df04683d68beca2bc4d88d1f0a770cd6c09659ba61294119aca682b7f7c201c6acf7fa555

    • SSDEEP

      768:hpLX9VgdvVj5eteLQgec9XJWlvTukulFNAbbfzY4q3Ny3kFBKv0Mvv:hN9UZxtVJMT7uT2bbLh13kFBK

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      $TEMP/pin.vbs

    • Size

      287B

    • MD5

      3f764ed6ee61afced5405a2e3f62738b

    • SHA1

      ce56c02f451bdbf20a1003df87fc2692ca06d0ed

    • SHA256

      22804ed36ad186b3ab18605719c83e70b6244f60aba00e16ca8f97d80b5cc0e4

    • SHA512

      6ed1d6327b67b3c863f71ede1d8be2f24c51454aab25b104d474024bfafcd732ba84a63ea60b218ce0e97a740c2717f87f4a38fcf211e780d027d36f4bc1d859

    Score
    1/10
    • Target

      $_8_.exe

    • Size

      1019KB

    • MD5

      fb72fac3f81c7545bd89ee7bef9d5be7

    • SHA1

      cbe7d8ecaa07fb8e0230d39b3d6084ccbc5c1fcb

    • SHA256

      2be39260cef37c8581c891863687cb3f1b22cc0aa43436cf3c0621c6cdf84da5

    • SHA512

      1de590f15e93f81af1c69ffade2a554230b2a54bb9162944106217642ce79d9ea42d79f67ee35ddd8495c61063c8fc3d1f84db88b8049aeb87c099d33c95dbfc

    • SSDEEP

      24576:3ieVHnPj15KsppZM14zSj1xXtaqRDrbZV2V6p/2Q:ye9j15K0p24E1B0yz2m2

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      MFC71.dll

    • Size

      1.0MB

    • MD5

      f35a584e947a5b401feb0fe01db4a0d7

    • SHA1

      664dc99e78261a43d876311931694b6ef87cc8b9

    • SHA256

      4da5efdc46d126b45daeee8bc69c0ba2aa243589046b7dfd12a7e21b9bee6a32

    • SHA512

      b1ced222c3b7e63e22d093c8aa3467f5ea20312fe76a112baed7c63d238bbe8dee94dfe8f42474f7b1de7aa7acb8ba8e2b36fdd0a3cda83ee85ac9a34f859fa4

    • SSDEEP

      24576:Tnc0xa+xDaWhzSenZncQfT0ExftQqDEu:Tn7VxWWhzSenZncQLVxft5DEu

    Score
    1/10
    • Target

      MFC71ENU.DLL

    • Size

      56KB

    • MD5

      baf751e7061ff626aa60f56d1d5d1fdc

    • SHA1

      b0382c3ac0c0dad7d793c9a3335316b5fcae2690

    • SHA256

      177b0bac987e7882449bd7c5900406f61a997f97ea1797614c8d86f40f03648b

    • SHA512

      f7333b481f1498b5eab2688856a5b86fec96b6bf7b781564dfcc018882ded4d7ee5a1fc0c2498607195a66d42a74034f9649a8b61fa548d3d6029f25c5a9648d

    • SSDEEP

      384:IxLbS+nSkl7c/tAGqyVaKOvtWQWJnBrx1+hV9RLNq/HRK/+nnWT59Dl:IZS+TeAGDjOvCnp4V9RLNqfRKGnWHB

    Score
    1/10
    • Target

      msvcp71.dll

    • Size

      488KB

    • MD5

      561fa2abb31dfa8fab762145f81667c2

    • SHA1

      c8ccb04eedac821a13fae314a2435192860c72b8

    • SHA256

      df96156f6a548fd6fe5672918de5ae4509d3c810a57bffd2a91de45a3ed5b23b

    • SHA512

      7d960aa8e3cce22d63a6723d7f00c195de7de83b877eca126e339e2d8cc9859e813e05c5c0a5671a75bb717243e9295fd13e5e17d8c6660eb59f5baee63a7c43

    • SSDEEP

      12288:fJzxYPVsBnxO/R7krZhUgiW6QR7t5k3Ooc8iHkC2eq:fZxvBnxOJ7ki3Ooc8iHkC2e

    Score
    3/10
    • Target

      msvcr71.dll

    • Size

      340KB

    • MD5

      86f1895ae8c5e8b17d99ece768a70732

    • SHA1

      d5502a1d00787d68f548ddeebbde1eca5e2b38ca

    • SHA256

      8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe

    • SHA512

      3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da

    • SSDEEP

      6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E

    Score
    3/10
    • Target

      uninstall.exe

    • Size

      44KB

    • MD5

      db36bc8837eee69cbc19ccbc74112d1a

    • SHA1

      4e920e470e839cb80fbaed72e28332ab44a8ab0b

    • SHA256

      7b9effd8662f725e9f6673bf7aa0b22cd83a520dba7bc8f9500b851152260f48

    • SHA512

      fe5e4ce741c693fe11a7506034d0c66b990ee67ab2f20f07d53e94e5cba3a37d853896b7455464338600b6e3dcbb234d13100fdeac0371a266ac8d0cee4b3c7a

    • SSDEEP

      768:HpPyOIYvQjyJMPbsm9CBZrKbEhqe4qDQ:HpDIg+yibsm9CzrBD

    Score
    1/10

MITRE ATT&CK Matrix

Tasks