Overview

overview

7

Static

static

3

973627fb51...18.exe

windows7-x64

7

973627fb51...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...in.dll

windows7-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...st.dll

windows7-x64

3

$PLUGINSDI...st.dll

windows10-2004-x64

3

$TEMP/Shop...rt.dll

windows7-x64

6

$TEMP/Shop...rt.dll

windows10-2004-x64

6

$TEMP/Unin...rt.exe

windows7-x64

6

$TEMP/Unin...rt.exe

windows10-2004-x64

6

Bin/2.7.37...rt.dll

windows7-x64

6

Bin/2.7.37...rt.dll

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    973627fb51da0e3fb4be6cbf4df8c1d0_JaffaCakes118

  • Size

    838KB

  • Sample

    240814-w89npasdkk

  • MD5

    973627fb51da0e3fb4be6cbf4df8c1d0

  • SHA1

    44102f7000ceeeed3118a0d5c02dd9342585e1e6

  • SHA256

    35e97c58c79e343b4bcd892c373029113ccc157822160f4341bae276ba7e9216

  • SHA512

    cd32936ccccac2c0ea63d052dc74360e5baacb52f48301e6618e66bdc442cf57439516da0469c7ed277e72842971a4ec5e3e02a25b1c70edbdc70d05acb3aada

  • SSDEEP

    12288:dv1Y4CbZaV7fcZNWhjv7t5pIp7P/42uyLuA/2+FV75SpM6eaXpYcD3hviDfe2ZQN:PFwMfGwft5p0LluA/2+TcMwtBofr6uh6

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      973627fb51da0e3fb4be6cbf4df8c1d0_JaffaCakes118

    • Size

      838KB

    • MD5

      973627fb51da0e3fb4be6cbf4df8c1d0

    • SHA1

      44102f7000ceeeed3118a0d5c02dd9342585e1e6

    • SHA256

      35e97c58c79e343b4bcd892c373029113ccc157822160f4341bae276ba7e9216

    • SHA512

      cd32936ccccac2c0ea63d052dc74360e5baacb52f48301e6618e66bdc442cf57439516da0469c7ed277e72842971a4ec5e3e02a25b1c70edbdc70d05acb3aada

    • SSDEEP

      12288:dv1Y4CbZaV7fcZNWhjv7t5pIp7P/42uyLuA/2+FV75SpM6eaXpYcD3hviDfe2ZQN:PFwMfGwft5p0LluA/2+TcMwtBofr6uh6

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Dialer.dll

    • Size

      3KB

    • MD5

      7666a3ea04037ba2f04512879cf7ae9e

    • SHA1

      5622855c42657d8a4ffc2ad87bbf06d0218ccfe6

    • SHA256

      4742cddec8e5e059ca106fb85f6a2dc690c18461b4cde07b36aa2b25c6e3f2c9

    • SHA512

      16e7d4f5cae64da54eda4f9a89e2214f9ad0c7fb8d2173fb1a807fe52180284ad8e834f447720a2d4c4e0ff996cac6ce6c7a6275b4eb66eebb81905b3f6052da

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/Install.dll

    • Size

      110KB

    • MD5

      841aba19974085d69bd7a8f7ea917499

    • SHA1

      a4afe8bc1a2c905a42e59fba942bc7b9c94a9dfb

    • SHA256

      186991ca946386842913697d49ccadb167065b9cc0801f37df627e97d927eaf4

    • SHA512

      bf72f751ab0a73f14979e591177b6f99dd18e3e45f26ece8b54022c6854d0a7cc4fdf583404c605d7054bdbec764e948bfa1aa1215b694b964e6c06f55f0230e

    • SSDEEP

      1536:EeCq0Q/2qklXkgvvJMnlInaH9AYdPgrEjdQsEdEkKP7qfzxSEkxjSBPlnx5jgQFs:LIaHT43pdSxjSln5jtFs

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      7e49eb67f1f3c62bb8c4b0a868b30645

    • SHA1

      2be42e3c6059485bc3b624a537ab1fb36a10a263

    • SHA256

      17f0946e0847bbaa6a06eb58aead13fce22a8606e9b3744cd2241debdf8d8bae

    • SHA512

      469c28b6da5b9499fd417f8cd74414d6c6edcbe6567eecc9421a69797a77ec323936deb96cd151611da57e311074ec0c56d82a9800d7aebac9538a947284ff9e

    • SSDEEP

      192:/6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTSK72dwF7dBdcQOz:/6JaVh4I5rpPbTS+BdhO

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallerHelperPlugin.dll

    • Size

      49KB

    • MD5

      52a442935d96e94c780ca616feed71f3

    • SHA1

      45e3d0af4e7582a0241433de6a73571100334b83

    • SHA256

      ea67e8f37654c7278903c73d62fbc8ec183881ab32feee5e2109c84715e63ecc

    • SHA512

      289accf4ae88bd34f02577d7f1339a551c5e2230c354663c616a887f1c54630e044e7be2ae68035ff660d75eaa1e313c3aad35f1548a0b16842da7d7375f199e

    • SSDEEP

      768:TWcIgKCbS2OAjFeiIWPwEPBRXkDYGzLk14IAm5oYKLPK:Kc3KqS2OXWXoDUZ587K

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      12KB

    • MD5

      05cf9ea3a8af17ea7e6874ea930558a2

    • SHA1

      8fd7f29604ccb4c48877971ba9a26b905024b34c

    • SHA256

      0d4748da315f3b77dbc15406e377baf97390801ce862b442367a639c8d5c6284

    • SHA512

      196171adbc465d4214ac2a50d8b1d46fd15e53f7d0853cdaefdd7481ecb6ea0dc98e3dfe844dd5068fb6ce867a95d865de324a414184d2fc96e0debbe02f6210

    • SSDEEP

      384:/Brzs5+6YH6rae8GzJ21stbUaVU9TTAb:/Brzs5+e9l2GtIaVU9TTA

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/Uninst.dll

    • Size

      47KB

    • MD5

      68ffd98799c7122e62b296358b8c5faf

    • SHA1

      b8da4b95fc4aaf2f6eff7dc8d0e2eef387c7927d

    • SHA256

      6e0ab96043a172f9bf9e575b39eb459487d983281233228b387ccedfef9ce51f

    • SHA512

      b96b7e9e2eb1c5c533ae0d9ac5ff9991b3565e83e13c2f109ef04438bf5d425aa878a9b13395d286dfcd3c1084ba584f1f5a90faa3d1bd825ce37ad59f5105a7

    • SSDEEP

      768:eYket1YEN/GGXcwaE1HxfB/hKYJW5LiwTvax7QCg6+plUp9+s:eY1RcwacDJzJW5iwza+CylUpUs

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $TEMP/ShoppingReport.dll

    • Size

      1.1MB

    • MD5

      76c78a88d548d4aa734e814b909cb6ab

    • SHA1

      cdf98bac625a1fd78b3d833fd91629a3e4f23982

    • SHA256

      45739e9b6a6d7442d5098a57806aa5ca9e66203b4b514254e0f9a07b5f25c146

    • SHA512

      6357c3f0a12800f699d45d65ae1f93ac11d17617adb2d076564acb8c259808aac9edf0993d7f5ddeec311a2606ea4fed4b7ccd5267c41269ef6506fa905e3862

    • SSDEEP

      24576:7y4Xo31iGqN0FDYiblJwRfB8xryg+DB3bk:7QqoDYiblJQB8Yg+dLk

    Score
    6/10
    adwarediscoverystealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral15behavioral16

    • Target

      $TEMP/UninstShprRprt.exe

    • Size

      430KB

    • MD5

      ce5057369ac17093d18fef2d4f193f70

    • SHA1

      610aaf10103725cd91c5da8b70cffd629bc00ff5

    • SHA256

      4d35d998a262dc1a84207553b8c6b7afa477e5cb88a339c6af14e159bfc7f966

    • SHA512

      37e4ea0a1393b199d43b4a70148dbbd584d6f17556f43a5617b8d5085c55bbe2cc230dc73b216ee64add6146aa02b519648fdd6c8797d93563a062b22ac89d93

    • SSDEEP

      6144:0XQRaUGa7LRNEQWQJ27MGAY1ZGTMAbYdLtiI/Lywenrzx1LEOjACR9mN7x8:0uGaXRuNoYTGYAbYd/DHenZ1vj9R9EG

    Score
    6/10
    discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral17behavioral18

    • Target

      Bin/2.7.37/ShoppingReport.dll

    • Size

      1.1MB

    • MD5

      76c78a88d548d4aa734e814b909cb6ab

    • SHA1

      cdf98bac625a1fd78b3d833fd91629a3e4f23982

    • SHA256

      45739e9b6a6d7442d5098a57806aa5ca9e66203b4b514254e0f9a07b5f25c146

    • SHA512

      6357c3f0a12800f699d45d65ae1f93ac11d17617adb2d076564acb8c259808aac9edf0993d7f5ddeec311a2606ea4fed4b7ccd5267c41269ef6506fa905e3862

    • SSDEEP

      24576:7y4Xo31iGqN0FDYiblJwRfB8xryg+DB3bk:7QqoDYiblJQB8Yg+dLk

    Score
    6/10
    adwarediscoverystealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks