Overview

overview

7

Static

static

1

59a0fa3b25...18.exe

windows7-x64

7

59a0fa3b25...18.exe

windows10-2004-x64

7

$PLUGINSDI...mr.exe

windows7-x64

1

$PLUGINSDI...mr.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    59a0fa3b2518dbfe268e0b8a40422a65_JaffaCakes118

  • Size

    112KB

  • Sample

    240718-3y9n9swcqc

  • MD5

    59a0fa3b2518dbfe268e0b8a40422a65

  • SHA1

    c3362f8326ed08a9a66541f064c0252c7c11a951

  • SHA256

    7258c09d8a81e51412a7610049bc94fa8292d60a3793b56c38cde409e6f9532e

  • SHA512

    8c525f22948312a92f4c1600c91b467a90888cf03e1b33c877ac5f35716cbb0a3c2511012433b87330de093d2d0bc4fce7bfb9108432516131f0f0e4b346017e

  • SSDEEP

    3072:HQIURTXJMeqgKJ+BCEC1f6eqhYU6cOLDOwWjqu:HsegKp1f6eWOLbpu

Score
7/10

Malware Config

Targets

    • Target

      59a0fa3b2518dbfe268e0b8a40422a65_JaffaCakes118

    • Size

      112KB

    • MD5

      59a0fa3b2518dbfe268e0b8a40422a65

    • SHA1

      c3362f8326ed08a9a66541f064c0252c7c11a951

    • SHA256

      7258c09d8a81e51412a7610049bc94fa8292d60a3793b56c38cde409e6f9532e

    • SHA512

      8c525f22948312a92f4c1600c91b467a90888cf03e1b33c877ac5f35716cbb0a3c2511012433b87330de093d2d0bc4fce7bfb9108432516131f0f0e4b346017e

    • SSDEEP

      3072:HQIURTXJMeqgKJ+BCEC1f6eqhYU6cOLDOwWjqu:HsegKp1f6eWOLbpu

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/downloadmr.exe

    • Size

      137KB

    • MD5

      bbf2521f0924f66c7bb0d63cae2af0ae

    • SHA1

      e8ebec5f73a4fa3c513611aa6b97ea3759c5d701

    • SHA256

      62fd49a2104878f136e2247037c5ef9a73f6a78c4ca3a1cc38e1bfb80b108021

    • SHA512

      0e643b8f2494acb366a030d33152eabe8c692ba3a39bb674ca9ff7f78f8f537d22110e613045581472003ce0d4f831ff487ee3e71b06635eee46a9b6a3fa4991

    • SSDEEP

      3072:fi3nr4JU8Zrc2u4dw3qq0H9uiB6K7vtrygh:q3nUJU8N8493Xlrd

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks