Overview

overview

7

Static

static

3

8a8e906b08...18.exe

windows7-x64

7

8a8e906b08...18.exe

windows10-2004-x64

7

$PLUGINSDI...if.dll

windows7-x64

3

$PLUGINSDI...if.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Update/KUpdate.exe

windows7-x64

1

Update/KUpdate.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a8e906b08ec09cb39e82f76adceb128_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240811-qt4aga1glk

  • MD5

    8a8e906b08ec09cb39e82f76adceb128

  • SHA1

    4d36f53064d4c2991d3c2442246e6ee79cf884a9

  • SHA256

    1652ecb6e3a48f87065eca74e1472efc1e1128f18d6dca8a3a3327afe2ea6a4a

  • SHA512

    a680e4bb1db4a5ed7315f63b6912938373f5c5b52a9ec5744049c767835b99e0595ff09e599bfd36f6e8d11d84edb26fcecb061ded17b10314802d89fbd2ece5

  • SSDEEP

    24576:NOF98lipLFu4vhXoA+jhXr9+Zh/pkm0WVygDFIU9VdfKVRL+0CP29qe:NkWlKLFDZoAE734DFIqZ0629b

Score
7/10
discovery

Malware Config

Targets

    • Target

      8a8e906b08ec09cb39e82f76adceb128_JaffaCakes118

    • Size

      1.3MB

    • MD5

      8a8e906b08ec09cb39e82f76adceb128

    • SHA1

      4d36f53064d4c2991d3c2442246e6ee79cf884a9

    • SHA256

      1652ecb6e3a48f87065eca74e1472efc1e1128f18d6dca8a3a3327afe2ea6a4a

    • SHA512

      a680e4bb1db4a5ed7315f63b6912938373f5c5b52a9ec5744049c767835b99e0595ff09e599bfd36f6e8d11d84edb26fcecb061ded17b10314802d89fbd2ece5

    • SSDEEP

      24576:NOF98lipLFu4vhXoA+jhXr9+Zh/pkm0WVygDFIU9VdfKVRL+0CP29qe:NkWlKLFDZoAE734DFIqZ0629b

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/AnimGif.dll

    • Size

      9KB

    • MD5

      11e94fedb34f46458f9dc773a91f2770

    • SHA1

      791cf30880c74df9d6f7c1e637e4fdf5fa88b38a

    • SHA256

      54ccdcb42fb3e63b7a55e8c0e7d12182a0338ea38b106b793ca048000a189ab5

    • SHA512

      57dd38bebdd7d8fbc4b3daeecabc5c2617d4f5b2f6ad2396a702f1da362bc72deacfea2dd1550b0e00269188676324e1b7dd6ed372211c8bf664af824ac8d950

    • SSDEEP

      96:kVh/i//UrWWXMAb+6aNqRjTwUWo5zFyRH0aTyZekTIVCAEHZNKNy0p:uh/Bl8AIQR/bWSMRH00yQBEH

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      31KB

    • MD5

      83cd62eab980e3d64c131799608c8371

    • SHA1

      5b57a6842a154997e31fab573c5754b358f5dd1c

    • SHA256

      a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294

    • SHA512

      91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9

    • SSDEEP

      384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      1d5c649dde35003a618b9679d5d71b92

    • SHA1

      0409bbab3ab34f8c01289cdd847b4d1a32d05b18

    • SHA256

      0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f

    • SHA512

      b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9

    • SSDEEP

      384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      4eff5fafd746f5decb93a44e3a3d570c

    • SHA1

      a11aa7681b7e2df1c7f7492a127d332d1495ea8a

    • SHA256

      cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5

    • SHA512

      cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72

    • SSDEEP

      192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      Update/KUpdate.exe

    • Size

      28KB

    • MD5

      bce571b56ca7cbcc0cd37ec045dd1c05

    • SHA1

      3430186b45ae783bfffdcf66bb4374c09a7536c3

    • SHA256

      0e2c09134ad37a4fb0a82f17dae0b0c7cc64907405ad30624b2da97740fbd71b

    • SHA512

      2ce84e7a46becb57f45ba185c4df70f9f3a1235e0f2768018f0ab19cf32cdd3d46ac6bd8ecd7b51e0b11e21ba5aca8025d7c8d705578a0af63d06b447add1acf

    • SSDEEP

      384:AdJl3Xf5jctGPSVPRQpfpfv6pbF1U8iUi:AdJl3XhwBZRQphKdk8Ri

    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks