Overview

overview

7

Static

static

1

5e5af423f4...18.exe

windows7-x64

7

5e5af423f4...18.exe

windows10-2004-x64

7

$PLUGINSDI...mr.exe

windows7-x64

1

$PLUGINSDI...mr.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e5af423f42ed8c8650608e910cc602e_JaffaCakes118

  • Size

    108KB

  • Sample

    240720-ayqbeasaje

  • MD5

    5e5af423f42ed8c8650608e910cc602e

  • SHA1

    1f46d3d9d80cd886c75f1828898d6f3e93a7634a

  • SHA256

    fd727359689653489f648f2e1d6014be2e1ac11eab243700e596dcc8b4618671

  • SHA512

    dc478d5f4154bce8961731416c5623fce7b21715d98bc4aaf8fd3efae1270de8ac6bda16505899d4aeb99b5f65470c47c13466c8e98b669b902cb58ded672b7a

  • SSDEEP

    3072:PQIURTXJ8eqgKJ+BCcCUiLTmdjiFtQI7nom7hnVjG:PsOgKB1ydMCIboYg

Score
7/10

Malware Config

Targets

    • Target

      5e5af423f42ed8c8650608e910cc602e_JaffaCakes118

    • Size

      108KB

    • MD5

      5e5af423f42ed8c8650608e910cc602e

    • SHA1

      1f46d3d9d80cd886c75f1828898d6f3e93a7634a

    • SHA256

      fd727359689653489f648f2e1d6014be2e1ac11eab243700e596dcc8b4618671

    • SHA512

      dc478d5f4154bce8961731416c5623fce7b21715d98bc4aaf8fd3efae1270de8ac6bda16505899d4aeb99b5f65470c47c13466c8e98b669b902cb58ded672b7a

    • SSDEEP

      3072:PQIURTXJ8eqgKJ+BCcCUiLTmdjiFtQI7nom7hnVjG:PsOgKB1ydMCIboYg

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/downloadmr.exe

    • Size

      127KB

    • MD5

      3c85066c68fc1edc6da8ec3887649925

    • SHA1

      fc2fcf2e964bf2ee4127530287a0c3f6057cb508

    • SHA256

      e77189c27645e70b4e9102f4e5f32d7ca4bb0eacb99d3a53ee2b4f1aac919f91

    • SHA512

      357263e601210a3248d1b53fa0f0c9f6346ded9c2c1f2cc0408743035e8352d38bd93d13e3fdcb87b58a425e8ebcda5da7813cf96bd51e16f34a3364eb3ac6c7

    • SSDEEP

      3072:ljWgVQ2dBzsIRQuI1Z0aqcU2Lk2kdh/wOZRDoQu/qq0M33kNAszGFAe:9WXqRGD0aqcUtb/xs3A9yJ

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks