Overview

overview

7

Static

static

3

620d3da55b...18.exe

windows7-x64

7

620d3da55b...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...cc.exe

windows7-x64

3

$PLUGINSDI...cc.exe

windows10-2004-x64

3

$PLUGINSDI...ok.dll

windows7-x64

1

$PLUGINSDI...ok.dll

windows10-2004-x64

1

$PLUGINSDI...ll.bat

windows7-x64

6

$PLUGINSDI...ll.bat

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    620d3da55be8cce610cccb366fd10232_JaffaCakes118

  • Size

    999KB

  • Sample

    240722-atgtgaselb

  • MD5

    620d3da55be8cce610cccb366fd10232

  • SHA1

    68012d54cc7faf66303084f600b2e6b04b8a842e

  • SHA256

    9ebfb7e3c1394ea3aec0641497db4af4643369243aec0a6703b7fa3a773dea3b

  • SHA512

    53ed0c89bb5d71f2086c8f178dbaacd0d07e2b53647789c047714687889ea2b8a929c70c2146d0d19823936e3d7e25fdbb135b58ce3a80844d05c97941329ccf

  • SSDEEP

    24576:FYheIZBT3d3xvh2YbyVGOLGragL+ymgBqKVi:aheIZL3xvh2vVdGagL+LgBVi

Score
7/10
persistence

Malware Config

Targets

    • Target

      620d3da55be8cce610cccb366fd10232_JaffaCakes118

    • Size

      999KB

    • MD5

      620d3da55be8cce610cccb366fd10232

    • SHA1

      68012d54cc7faf66303084f600b2e6b04b8a842e

    • SHA256

      9ebfb7e3c1394ea3aec0641497db4af4643369243aec0a6703b7fa3a773dea3b

    • SHA512

      53ed0c89bb5d71f2086c8f178dbaacd0d07e2b53647789c047714687889ea2b8a929c70c2146d0d19823936e3d7e25fdbb135b58ce3a80844d05c97941329ccf

    • SSDEEP

      24576:FYheIZBT3d3xvh2YbyVGOLGragL+ymgBqKVi:aheIZL3xvh2vVdGagL+LgBVi

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/apple-scc.exe

    • Size

      894KB

    • MD5

      9063d36084fbe906558c507409a71377

    • SHA1

      4ba56ab05ed64d5e447e93d05544680d31ff1a6b

    • SHA256

      bcdbcadc5b2b21a64a0f9caa3413745c7ed4d137d3bb0cd79526368ecc7f214d

    • SHA512

      c3c211bd4867efd66243194b3e9514a34c197e527a83e6384a88ceaa54d1547f37713fef8180c4b0fcc23f9bb81208de905525eb107b38a5619ce88aa86d2394

    • SSDEEP

      24576:M4QLWUfv+QjsSjgfrWlWWSCFgtx4/OJmn5gHv3Ry3NT2ZP0ro4kT42:M7dGEEjWV3cx4/u+gHv3m2ZL4f2

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nstvhook.dll

    • Size

      7KB

    • MD5

      18ebdc8b76af2fbd2cccd69b37efd2d8

    • SHA1

      f70f2af2392e45594995a1c8b8865080b3513ac8

    • SHA256

      c9a72bee4f15a282c72620cd21356c59a5768c59cbcb28dfa95fcfe464748456

    • SHA512

      83eb58566dd81240bd5f7af445c8caf9a92943d129ce12587858f2316cc822635612af9ade0fdbf0d426b9cf81f5d6b8bc3decb80fb7c425c3c2117259f435ff

    • SSDEEP

      48:a7VPy88gMMb/rg1fzC9boheUCSNg7OzoKqcBoqSQ/qFzL5H5kjX7UIltnNCu/Yyl:elfEJzpkVmVzoK1Boq1qldu37/Yy

    Score
    1/10
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/uninstall.bat

    • Size

      33B

    • MD5

      b80a7b6f60117a9ccfc099c705598a88

    • SHA1

      3ff7aa18e3fa74790f4abe417469c6d9f3d47487

    • SHA256

      fa2f0953d67c07b1c4afb16ac079a44fbd8b15f4fa56552404eb60b4643dbcc7

    • SHA512

      37131677f74f4b4b1ce8a591c71a656eb9a5ae0f0a8e3a984f53e162395a0d9d986472a3dcefb031a281b4c09af219def6072ff60dd4e921559f0bf00914edcc

    Score
    6/10
    persistence
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks