Overview

overview

7

Static

static

7

8505fd8a84...18.exe

windows7-x64

7

8505fd8a84...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...on.dll

windows7-x64

7

$PLUGINSDI...on.dll

windows10-2004-x64

7

SmartTipC.exe

windows7-x64

3

SmartTipC.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    8505fd8a84d1ad519c61257634829561_JaffaCakes118

  • Size

    381KB

  • Sample

    240810-gn38vaybkq

  • MD5

    8505fd8a84d1ad519c61257634829561

  • SHA1

    3e591f2a79481822295c92dc4ee1ab8ec4f97e75

  • SHA256

    e6840529f99f9e62e66dd4a9d54b755f7dc03c87f2c024d0f086b5c0aab1beeb

  • SHA512

    9bc8b720c290d181f10e2fe23934a0c6c2aae4dfb778bc0414edc7490dd5854d21f99e4b0ad30b9f5779bbfdfb94348c7a08ed71e6e5b4dd680245af63bed48e

  • SSDEEP

    6144:ZFJ0Q3pSCr7p+rtby5kEKHNjM8TfN0EGG7bR/p3o3pBJUErLbieXG2SgWyc6:n3w8shbwkJdTOG7tqDUcbi35xb6

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      8505fd8a84d1ad519c61257634829561_JaffaCakes118

    • Size

      381KB

    • MD5

      8505fd8a84d1ad519c61257634829561

    • SHA1

      3e591f2a79481822295c92dc4ee1ab8ec4f97e75

    • SHA256

      e6840529f99f9e62e66dd4a9d54b755f7dc03c87f2c024d0f086b5c0aab1beeb

    • SHA512

      9bc8b720c290d181f10e2fe23934a0c6c2aae4dfb778bc0414edc7490dd5854d21f99e4b0ad30b9f5779bbfdfb94348c7a08ed71e6e5b4dd680245af63bed48e

    • SSDEEP

      6144:ZFJ0Q3pSCr7p+rtby5kEKHNjM8TfN0EGG7bR/p3o3pBJUErLbieXG2SgWyc6:n3w8shbwkJdTOG7tqDUcbi35xb6

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      44KB

    • MD5

      3599d30554ad65dc29fc689217d2152e

    • SHA1

      8f5fcc313b667a1de2d56573bcf98d43fd0d4ff9

    • SHA256

      1af3ac7d3176af42e8594ba0c33821d3318f4eea5cbb799bf8fab58e480efe0e

    • SHA512

      846776b1d908b5204667715ffdfd3a6c76dface1677e8b1e5156ceac2ef0a739f68b48ccbb919c9e08d6ff359a93174bf0b90def7d48cee54cd3c41d8d8575f2

    • SSDEEP

      768:oY6+2hD1lu3SFh80Z9pe7nJRJ3QN8DOUVowlo+J:76xhZlM0h/9panJ73CSFl

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      e54eb27fb5048964e8d1ec7a1f72334b

    • SHA1

      2b76d7aedafd724de96532b00fbc6c7c370e4609

    • SHA256

      ff00f5f7b8d6ca6a79aebd08f9625a5579affcd09f3a25fdf728a7942527a824

    • SHA512

      c9ddd19484a6218f926295a88f8776aff6c0a98565714290485f9b3b53e7b673724946defed0207064d6ab0b1baa7cb3477952f61dbe22947238d3f5802fa4f4

    • SSDEEP

      96:57GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgN532E:VKgfwgcr8zylsB49Ud0qJVgNQ

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/version.dll

    • Size

      6KB

    • MD5

      ebc5bb904cdac1c67ada3fa733229966

    • SHA1

      3c6abfa0ddef7f3289f38326077a5041389b15d2

    • SHA256

      3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75

    • SHA512

      fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f

    • SSDEEP

      96:nPtMckE1e91BopVyXwUhn3f1I0vOKeoqO4d8QvS9:n1MMuOUhdI0c04yV9

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

    • Target

      SmartTipC.exe

    • Size

      718KB

    • MD5

      8b21e1cdd6387ef45b7d6ce0e710187a

    • SHA1

      340420081a445cd076d8977c229340d5f75c4dae

    • SHA256

      b837759ff831c7b470c9c6063fb19909e603e28566cb7180e2f3386aec394e65

    • SHA512

      df07797a8a94af064084fa5029188416ea4ccf9d2e30ad7704072e2b16c4baf106c2bbd719e1317e53907f813ee2445dd40d69360a741783f1423f2920d37523

    • SSDEEP

      6144:WlELF2lwDy6nVusULi0MUvERlZURq0MB7h5Ptk4zXlY/M0QoVUNUsWTBVxGPcTU4:WAFh08lh5NzXlY/MToucBVx9AdCaY

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks