Overview

overview

7

Static

static

3

6fc6ae36d4...18.exe

windows7-x64

7

6fc6ae36d4...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows7-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/xml.dll

windows7-x64

3

$PLUGINSDIR/xml.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6fc6ae36d4b8f5994d4cd9cd26de9728_JaffaCakes118

  • Size

    233KB

  • Sample

    240725-qsg1va1dlk

  • MD5

    6fc6ae36d4b8f5994d4cd9cd26de9728

  • SHA1

    58116a7f38dab1d2fb752afa598802676ba0897e

  • SHA256

    2f8136071dccbbe3188bf50419491aa08816ff2b7662bbbd5c07c325f633fa48

  • SHA512

    ce294fe3406865c627071c19b03aab7968027efe276762dfc6f917b35c49c63850ebdd4e7d78f2e5321c759711e42011b2a780d787db151856d8de4d01c9b71a

  • SSDEEP

    6144:S183YxSfwjBaU+8cNiC/8KzkjHPTDX+kp:VIYfwAU09vzk3

Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      6fc6ae36d4b8f5994d4cd9cd26de9728_JaffaCakes118

    • Size

      233KB

    • MD5

      6fc6ae36d4b8f5994d4cd9cd26de9728

    • SHA1

      58116a7f38dab1d2fb752afa598802676ba0897e

    • SHA256

      2f8136071dccbbe3188bf50419491aa08816ff2b7662bbbd5c07c325f633fa48

    • SHA512

      ce294fe3406865c627071c19b03aab7968027efe276762dfc6f917b35c49c63850ebdd4e7d78f2e5321c759711e42011b2a780d787db151856d8de4d01c9b71a

    • SSDEEP

      6144:S183YxSfwjBaU+8cNiC/8KzkjHPTDX+kp:VIYfwAU09vzk3

    Score
    7/10
    defense_evasiondiscovery

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      17KB

    • MD5

      9194668e4763bb5f0573d020a1e29d54

    • SHA1

      d7cd6aaba3728e40f128fa97d2c57b60d82868ca

    • SHA256

      f73984bd94184b0cc9ae5023b90ef81a7f3f06480f66cbb2a015d7f115e2923b

    • SHA512

      2d32747b00e231ee2df67d0e71428f0e3b4e3f265bcbed11cfbe2a88ea5ad7cac6d321ae0ab1daab13cfe25ce8d76338c16195b01ac2ab84479c20cfe8ee6d54

    • SSDEEP

      384:kaS+Uvo4tLIpV1jumX1YKJT4YTbhb8pGXlSd/xX4:kaAvo4tL61KOmKJTxb8pGXlSNe

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/SGUpdatePlugin.dll

    • Size

      172KB

    • MD5

      a0722529e64d9ead26253b98a05b350f

    • SHA1

      91e4594a81f45b6423806010bb9922bb9614575a

    • SHA256

      15a4ea25393daaecf693e587eb69795c886aac65a48a012c8f941c9626ca9f5e

    • SHA512

      65a74625feaa89cca0aa99cf51eacd16afbda0b4ec4f9d21b10c7d87be07116f8e85bc2ce5b1b318090cba67ad11b87d2b6a5bcdcc8cd349990310034e8f18b7

    • SSDEEP

      3072:FVnWTG2di6pWL9HuRhh1LKPKP2Q8rRcMNlxtknPDZw:FATXw6mHEhYyuLtJtP

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/xml.dll

    • Size

      118KB

    • MD5

      42df1fbaa87567adf2b4050805a1a545

    • SHA1

      b892a6efbb39b7144248e0c0d79e53da474a9373

    • SHA256

      e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845

    • SHA512

      4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d

    • SSDEEP

      1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks