Overview

overview

7

Static

static

7

5ef53ed52d...18.exe

windows7-x64

7

5ef53ed52d...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$SYSDIR/Cn...on.dll

windows7-x64

1

$SYSDIR/Cn...on.dll

windows10-2004-x64

1

CSPlatform.exe

windows7-x64

7

CSPlatform.exe

windows10-2004-x64

7

csp_ex.dll

windows7-x64

7

csp_ex.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ef53ed52d54127d5fa00cf488ab11ee_JaffaCakes118

  • Size

    722KB

  • Sample

    240720-el6vvavhjp

  • MD5

    5ef53ed52d54127d5fa00cf488ab11ee

  • SHA1

    7cfe9a833a298e9c9aae00d06770ba92f973659b

  • SHA256

    19e70fa97a530f83cecada925413a53e75d58a0701291ecb0381fbdec688245a

  • SHA512

    80dece6aea6b8d24ecb19c783903938136a8d66326e3e3185588e1ef60b4da2406b0df44e4921e9cdf6a6cf0f4d67a6d4f8d1a7a3c71b31fd0a98c9734c2845a

  • SSDEEP

    12288:cv/vWCsI8q8GTSjFlDVAXjuscas2pSd+ynCP3ygRFJ4QpQ+c16O15Yiw1vCyiZGm:I/uCtbpX+as2s+2IigRH46Q+W6O3YxvM

Score
7/10
upx

Malware Config

Targets

    • Target

      5ef53ed52d54127d5fa00cf488ab11ee_JaffaCakes118

    • Size

      722KB

    • MD5

      5ef53ed52d54127d5fa00cf488ab11ee

    • SHA1

      7cfe9a833a298e9c9aae00d06770ba92f973659b

    • SHA256

      19e70fa97a530f83cecada925413a53e75d58a0701291ecb0381fbdec688245a

    • SHA512

      80dece6aea6b8d24ecb19c783903938136a8d66326e3e3185588e1ef60b4da2406b0df44e4921e9cdf6a6cf0f4d67a6d4f8d1a7a3c71b31fd0a98c9734c2845a

    • SSDEEP

      12288:cv/vWCsI8q8GTSjFlDVAXjuscas2pSd+ynCP3ygRFJ4QpQ+c16O15Yiw1vCyiZGm:I/uCtbpX+as2s+2IigRH46Q+W6O3YxvM

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      31KB

    • MD5

      83cd62eab980e3d64c131799608c8371

    • SHA1

      5b57a6842a154997e31fab573c5754b358f5dd1c

    • SHA256

      a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294

    • SHA512

      91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9

    • SSDEEP

      384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      1d5c649dde35003a618b9679d5d71b92

    • SHA1

      0409bbab3ab34f8c01289cdd847b4d1a32d05b18

    • SHA256

      0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f

    • SHA512

      b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9

    • SSDEEP

      384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      4eff5fafd746f5decb93a44e3a3d570c

    • SHA1

      a11aa7681b7e2df1c7f7492a127d332d1495ea8a

    • SHA256

      cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5

    • SHA512

      cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72

    • SSDEEP

      192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y

    Score
    3/10
    behavioral10behavioral9

    • Target

      $SYSDIR/Cnzz.Visa.Certification.dll

    • Size

      293KB

    • MD5

      30dc42405bd39a5996361af3fb16a952

    • SHA1

      1db2b20bf6139820746af58861068c0f46a1b397

    • SHA256

      53acb404feaf8fc9bad68ccb35dda7a68c8147dbc09f8ac78d0721a50a45a307

    • SHA512

      054215a42fdca403a93a4b0fbaaf8ce46896c3b7d76eb6cd269324bb27a40e310413ae0e378d9a93a87fe6d3c82d5aec6f6486065664e2702916ca3a8015129d

    • SSDEEP

      6144:ly6rynJhHq+Te8Pq32gZeBHGSoPAO3Watn0Ta9:1y7ne8Pq32gZeBmpRJ0Ta9

    Score
    1/10
    behavioral11behavioral12

    • Target

      CSPlatform.exe

    • Size

      273KB

    • MD5

      69c1a468e8995926fc45774617762ba5

    • SHA1

      67ec0779bc67feab35c33a9527707dea74580d40

    • SHA256

      d8f1e233f13944b161db07e2188491468380328085c3fb9cbe74426a35259207

    • SHA512

      6684d24d67c5524b177e528c8d351243e6fac4d80c56725404684500d82a6e9714fa138b23be590dc1271b48afabe9996a9442a0b67da64b424dffbc88214225

    • SSDEEP

      6144:hlPpjbdjhAzqHozq2RSGKaH+nX0QN7gBifUDam4PsJJvNJZQUI:RjRjozRXKaH+XZgBif8wPwJlJk

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14

    • Target

      csp_ex.dll

    • Size

      229KB

    • MD5

      251318aa4d10aaad1ccd10591a592669

    • SHA1

      6c2637cf2143e94b311344522c1c6f5d81b5eb33

    • SHA256

      04f35dba4cc7db009c06d5c421bc5c2b2b810f490739adf23cc35cd7781da297

    • SHA512

      2131ed79540ee2c86f50aacfe64def18b6bee07f4b5307efe109e6df517c4cb7511ad1c2ed8991e1b57ddf1163bb891d7a694723505ab1de804066b66e0bb5d3

    • SSDEEP

      6144:wUg5i7NyWltPBXkN3KqytBZFo7wlW+rq0kN5:4QNltJFzdfWYq0kH

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks