Overview

overview

7

Static

static

3

8940d064f6...18.exe

windows7-x64

7

8940d064f6...18.exe

windows10-2004-x64

7

$0/queryscan.dll

windows7-x64

1

$0/queryscan.dll

windows10-2004-x64

1

$0/queryscan.exe

windows7-x64

1

$0/queryscan.exe

windows10-2004-x64

3

$0/uninstall.exe

windows7-x64

7

$0/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8940d064f6f837cd81c94842f1b297f8_JaffaCakes118

  • Size

    687KB

  • Sample

    240811-gnd9qaxern

  • MD5

    8940d064f6f837cd81c94842f1b297f8

  • SHA1

    71eee918420093d2d1dc83092935555f082f3a3c

  • SHA256

    e6aa89731008411d0b72dbf22cf237c57435fc4e58fffc524bfa6fdb6a348e32

  • SHA512

    60762d66503e4115d60383e4e33770d84dd481c7815de12a8942f83ce05c52ab1195649d992974ba390f787360a515fa1e326e8f39cd82746476044419317f43

  • SSDEEP

    12288:pzsUJ5AT/wiQ0XRVtXbB9yu3ScuOfxGi/TvrjGRTzYK1Sg0j8mexNkC:pzrinQ0TV3M+xGiLHUThjaNesC

Score
7/10
discovery

Malware Config

Targets

    • Target

      8940d064f6f837cd81c94842f1b297f8_JaffaCakes118

    • Size

      687KB

    • MD5

      8940d064f6f837cd81c94842f1b297f8

    • SHA1

      71eee918420093d2d1dc83092935555f082f3a3c

    • SHA256

      e6aa89731008411d0b72dbf22cf237c57435fc4e58fffc524bfa6fdb6a348e32

    • SHA512

      60762d66503e4115d60383e4e33770d84dd481c7815de12a8942f83ce05c52ab1195649d992974ba390f787360a515fa1e326e8f39cd82746476044419317f43

    • SSDEEP

      12288:pzsUJ5AT/wiQ0XRVtXbB9yu3ScuOfxGi/TvrjGRTzYK1Sg0j8mexNkC:pzrinQ0TV3M+xGiLHUThjaNesC

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $0/queryscan.dll

    • Size

      560KB

    • MD5

      f8e5f2822513a7c0ede3fb6c149c379f

    • SHA1

      5839556bc7b96e3a0858b9b8568552cc4649d328

    • SHA256

      33a675dd18b5d0b8396fa1372d1cd3485b131b0b4eec00bd154348d358e1df3f

    • SHA512

      2ad2f1fa3a3e10bb47334ef66cdbb170e6da9e67f4420b9a2fcd04b7808ad09580168d4c7cfdea721c021a3802603bc0e6f3a4ba46e34802d93198d7641dd73f

    • SSDEEP

      12288:6yV6A/r0g2dvfIPplW8RbnBY/8UjZBCrfY9kQqr8K:dpppI8VnBY/zBqfQqf

    Score
    1/10
    behavioral3behavioral4

    • Target

      $0/queryscan.exe

    • Size

      44KB

    • MD5

      5361448e530083cbc32575bc3a4e3f9a

    • SHA1

      2d292b212a6c5f9078784d852bc3b9e7849b9c3c

    • SHA256

      11319af5856a17702687b6b1528b1642053fc230e507527c86b8fd03e0a63313

    • SHA512

      d0684bc1d6bac4d983a76bca23e7b371307d73e3bc68504de7e0b93d1c719bdf02558a7e991006ffc9b35dccd5753a488dda73cbec80878aeace9e68f31ef71f

    • SSDEEP

      768:E2aCsKkpdQdJmhIf2DVyDIybf2BoecOIK0+V1l:E2qKkpcJmWf2DMDI+kFcTwl

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $0/uninstall.exe

    • Size

      78KB

    • MD5

      73100591b69684a8a3a4b96fec87e9a1

    • SHA1

      196ba26e3252032dd7d72975e945b88918a30848

    • SHA256

      d19abda20e0ef845ec1af36884a8d4f584d3fd859fc7b844864e8213c41111cf

    • SHA512

      1e2cd48708ccb4db2868a99c04861b2804f394e294e410e97d8931537b34849c39be05d32802c2fc80efc9ce90bb0643d8f044153cd335bce385454e7ab248c4

    • SSDEEP

      1536:PEkjY1zy214Qay0DGkJ7qAELVigJ0FNGcpspCILLyK2/DV:8kjAJ4dDGkJ+AI0LZWa/h

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks