Overview

overview

7

Static

static

3

70a7dc761f...18.exe

windows7-x64

7

70a7dc761f...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

3

$R0.dll

windows10-2004-x64

3

$R2/NSIS.L...4_.exe

windows7-x64

1

$R2/NSIS.L...4_.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70a7dc761fc013c1cf5f4bddc175aef4_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240725-wlyynsyeke

  • MD5

    70a7dc761fc013c1cf5f4bddc175aef4

  • SHA1

    cd06f0a0f614b81555b449572e8a24358593d622

  • SHA256

    5bcb3ad77dba9f9a27271fa4c435577dde8da512705c72aabe356cc717b3e781

  • SHA512

    d014abe0ae76464f2838ee233ac0f6f711c23846a6ccd441963796fd482441a6edbe5fe4b7eee882c5d9ee205c265cb14310bfdfb86e5f3492595e7577ff2281

  • SSDEEP

    24576:U1WNQ5y5Zfdvo5kTqPC7oWwAFpsnKVOXDIBXprU+iqJiNt/22KEPrsz414Akjeej:U1PUZfdAPCyKVOTi5rSt/2p214Aqeo

Score
7/10
discovery

Malware Config

Targets

    • Target

      70a7dc761fc013c1cf5f4bddc175aef4_JaffaCakes118

    • Size

      1.3MB

    • MD5

      70a7dc761fc013c1cf5f4bddc175aef4

    • SHA1

      cd06f0a0f614b81555b449572e8a24358593d622

    • SHA256

      5bcb3ad77dba9f9a27271fa4c435577dde8da512705c72aabe356cc717b3e781

    • SHA512

      d014abe0ae76464f2838ee233ac0f6f711c23846a6ccd441963796fd482441a6edbe5fe4b7eee882c5d9ee205c265cb14310bfdfb86e5f3492595e7577ff2281

    • SSDEEP

      24576:U1WNQ5y5Zfdvo5kTqPC7oWwAFpsnKVOXDIBXprU+iqJiNt/22KEPrsz414Akjeej:U1PUZfdAPCyKVOTi5rSt/2p214Aqeo

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      444e1109d960c307df0ca2b33a24731b

    • SHA1

      55e3b57d06128911ed4af44858d199d9b1945edc

    • SHA256

      b3ba181120cd5b57e2cd5435bbd64c3257f7525ade359f89554e93f466692125

    • SHA512

      9efdb45ee0eae73c24d3f01ff799160090f2b1f0f28ee8da3af52992fec220bf905070ce5a6cc1b5657642440ad29c22bc6889cd3ee1f674a908a935dcf4c2a8

    • SSDEEP

      384:fKlm7i+c3QW6ckPhyDEaLny2bbBBIXwZ:Cqi8BcyhEhLfbbTI

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      9a6372eb96d925aff95d33840588d4d8

    • SHA1

      dcea46256bbf80102f91d94a29ea1087bb46cd57

    • SHA256

      20b85b81e5e38988863e33793610c7f904d632a5b66128537b7b69a95856e0cb

    • SHA512

      299629231f59eb39c6868e453080bd63f2867bf3b9020da5f2f9a480710db4193271e5c483f2bb2ebf75f40875b741655790fe94fce6eef51fb9044d2f54bbf1

    • SSDEEP

      192:fOShJI/rmOAIPkWpUybQ9WhP4t5Rwc89XbubZak5:66OAOkWWycGP4XRwc2qFak5

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $R0

    • Size

      280KB

    • MD5

      b85f4f6fb8e437eac274a45760f8e5cc

    • SHA1

      88676b3a2683ea1acf249a84c73c96e38834fd20

    • SHA256

      d11f0b7aef24e676ec74c60fd4e13a5bb04dd10655cf263c85d6a30fe759599c

    • SHA512

      5cf6c2ffb7bfb1e727f95293455a659890e83e0b5a6967ca55c76a120b5eb2239cc8101576886e1373f16d72df06dc81fe424a888db45c0f2d950595cfeb9a50

    • SSDEEP

      3072:MuiFaFC91TIBKioWxgQaHNeE0oYlYmOr+PCB9kVXAJRl8EOTGO36vnxVHZSjK19:MfQBKZagQasogYZrf2bbKPpSjK19

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $R2/NSIS.Library.RegTool.v2.$_4_.exe

    • Size

      4KB

    • MD5

      6a8da2506f93130eacfa6812000bcb21

    • SHA1

      63820add143bace2dc964f8b98fa255e2d3405e7

    • SHA256

      628135523df1587a0585d6ddea10a5481c775edc35dfec41235c9e8aa3572959

    • SHA512

      318ca33decacb8528b7bc3d75673a923799b379c2a65b07bac5599bcc2e84e9e1e9c6bdcba30fa24021c980f5953426174a35d3fa811640d62dd0dff9d9d5ffc

    • SSDEEP

      48:iEEnKnLwNkQRikmxH2tHAmjW+wuINvRfnxhCKZLcibO8QCLU8QCf2dBYvm4DOgwZ:0KqPwI12umRfnx8KpdV2d6+4DFH/6

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks