Overview

overview

7

Static

static

7

865add6684...18.exe

windows7-x64

3

865add6684...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...rd.ps1

windows7-x64

3

$PLUGINSDI...rd.ps1

windows10-2004-x64

3

$PLUGINSDI...om.dll

windows7-x64

7

$PLUGINSDI...om.dll

windows10-2004-x64

7

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

DDGuo.exe

windows7-x64

DDGuo.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    865add66847544389875004d415f0d15_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240810-re8r3swhqd

  • MD5

    865add66847544389875004d415f0d15

  • SHA1

    25699db0abdb5c63c8bf6043148415db49007fed

  • SHA256

    d2e79d6d1f4ee38663ab481cfde7e24651c451a215f5578ab74655ab77d7ad6f

  • SHA512

    c34c71238c857255ba35903d93b5171b588e705d87362b83334a2261e45ee0e26539a84e57179357fed96c3aa1b7ded69373c8261bea76cd8b8d2b7b846af01b

  • SSDEEP

    24576:JBcAstrBz7urSWlUrC62OcEfvHryRKTGgKgs3QyC:JBcA8yreQ/EfvHtSxQyC

Score
7/10
discoveryexecutionupx

Malware Config

Targets

    • Target

      865add66847544389875004d415f0d15_JaffaCakes118

    • Size

      1.0MB

    • MD5

      865add66847544389875004d415f0d15

    • SHA1

      25699db0abdb5c63c8bf6043148415db49007fed

    • SHA256

      d2e79d6d1f4ee38663ab481cfde7e24651c451a215f5578ab74655ab77d7ad6f

    • SHA512

      c34c71238c857255ba35903d93b5171b588e705d87362b83334a2261e45ee0e26539a84e57179357fed96c3aa1b7ded69373c8261bea76cd8b8d2b7b846af01b

    • SSDEEP

      24576:JBcAstrBz7urSWlUrC62OcEfvHryRKTGgKgs3QyC:JBcA8yreQ/EfvHtSxQyC

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/Processes.dll

    • Size

      35KB

    • MD5

      2cfba79d485cf441c646dd40d82490fc

    • SHA1

      83e51ac1115a50986ed456bd18729653018b9619

    • SHA256

      86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7

    • SHA512

      cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043

    • SSDEEP

      768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      140KB

    • MD5

      7f6360e2354f1b4bffd60640caf4979c

    • SHA1

      c729814e3efdb6bd27104e483d5bed0c86f20627

    • SHA256

      74280799fb68ff436c393dc0fe1c1186b40ba4c83b8941dad62bf0ec09aeaa0d

    • SHA512

      31b8f8ec31d3c761a8a528d502640e4197a8776239bb9cf70a403a886a9d1ac754fc8608df9baef3cf93132e0603457c0f6e0f782206a5a3a5a9d12a81a3dfe8

    • SSDEEP

      3072:swDEBgaBwp/QVGOdEN+fGN3V3n98IsnxRtDDMtzVT7KL:swDE6p/6beN+u9FpsnxRKhVT76

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsRandom.dll

    • Size

      21KB

    • MD5

      ab467b8dfaa660a0f0e5b26e28af5735

    • SHA1

      596abd2c31eaff3479edf2069db1c155b59ce74d

    • SHA256

      db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73

    • SHA512

      7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301

    • SSDEEP

      384:LCHDPMs4GdtyO5roguusMxUXiO3wOw95euooP2UgKbd9BvNtf:LCHD6Gh87MKXil/5r2U3z

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/services.dll

    • Size

      7KB

    • MD5

      89408795f143525890bbda9281c42f45

    • SHA1

      bd9f08641cbe86d18c985cea5325dc2ad8525aa6

    • SHA256

      065564c3d7e19e7dea083fb9a426dfdfeabba6ca3a7587bee938f75db5753114

    • SHA512

      ba11a243b97326f6cd12f7f6f8b81e67f7e8f55b5dcf63a7e705813f85c9af1866891770077514051ce153527b074dcba2881b94bdb1925dedc81354e9a84cd6

    • SSDEEP

      96:XrXHYWyrDznMnpuQQQjGVw1DVjjQrFUsuL579yAwEN3sKPqg3k+9tyz:XzbcUpuQQcCSDVjjQrFDkZ9Fw+3fiYH

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      DDGuo.exe

    • Size

      1.8MB

    • MD5

      b1c6e284cce08e1340baf7da2f05d4e2

    • SHA1

      6bcd1f3ccffa7d97c29e08b508b796d304727465

    • SHA256

      dff017b4a1aa52da81d2dfc8c156e128d59fbcf90be901a5d2322c767f155b4b

    • SHA512

      1cd32ebafeb0650eed71d30e95a09b2e40dca05ffe0a12e350980eedc1bc211e832a729927f29c794a03dd97c6879467d21692697038b473e0d92cd32d489c38

    • SSDEEP

      24576:R1VZ2WDFjSjltxPmOxjnTRNIJMXpFdt1R3RRFwh/Ybp+yZrKU+zloeg1c:R1RZkZ7IJMcSkyZrK1zloen

    Score
    1/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks