Overview

overview

7

Static

static

7

a4afd325f7...18.exe

windows7-x64

7

a4afd325f7...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

IEProt/IEProt2.exe

windows7-x64

IEProt/IEProt2.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    a4afd325f7b612b613d157b8a3bdcc70_JaffaCakes118

  • Size

    318KB

  • Sample

    240818-arma6syakp

  • MD5

    a4afd325f7b612b613d157b8a3bdcc70

  • SHA1

    18f2167e56f4edffcb1c37c5c27be591e6de751f

  • SHA256

    1a291b488bc80b3663a5021a8b61f753ab2b8af03b5019ef43a36b77db6e72b3

  • SHA512

    c96ec069ca696d6c64f14f5ae5a43bfaeadd8f6b0adf6385dc85c8d0af7f2be8ed92b438334699bda91f0ec4fc6c25b99783ae239e6e1e37063875fce9bc318c

  • SSDEEP

    6144:pgGTP+W6vQYlRuKuNvY5W9YfQbjZ6uL3hyh7SUW+WDEJKxlOHyyy:hWW4BRuhY5W9whG3S7q+W4JKxlOY

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      a4afd325f7b612b613d157b8a3bdcc70_JaffaCakes118

    • Size

      318KB

    • MD5

      a4afd325f7b612b613d157b8a3bdcc70

    • SHA1

      18f2167e56f4edffcb1c37c5c27be591e6de751f

    • SHA256

      1a291b488bc80b3663a5021a8b61f753ab2b8af03b5019ef43a36b77db6e72b3

    • SHA512

      c96ec069ca696d6c64f14f5ae5a43bfaeadd8f6b0adf6385dc85c8d0af7f2be8ed92b438334699bda91f0ec4fc6c25b99783ae239e6e1e37063875fce9bc318c

    • SSDEEP

      6144:pgGTP+W6vQYlRuKuNvY5W9YfQbjZ6uL3hyh7SUW+WDEJKxlOHyyy:hWW4BRuhY5W9whG3S7q+W4JKxlOY

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      31KB

    • MD5

      83cd62eab980e3d64c131799608c8371

    • SHA1

      5b57a6842a154997e31fab573c5754b358f5dd1c

    • SHA256

      a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294

    • SHA512

      91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9

    • SSDEEP

      384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsWebEx.dll

    • Size

      296KB

    • MD5

      cc329d5153c6b5949ee9dcedb12926ab

    • SHA1

      75744729739a8db546c08102dde407574d592a3b

    • SHA256

      0974e41b380a2e6fa080b04b7558d12e92d5d0885edf6025b7d0000201de59da

    • SHA512

      42b511bcbc639b6d6b3f657830a56c287d30a9ea0fbb5e63ec1db21bfcbd403a3fb3400f59ed94970fc4a71ca0830749a3f2a3190399c6e596413bba876a0b2e

    • SSDEEP

      3072:pdVMcUtREsBESl+4+dTqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5dnD:xMcUjpBrAnTqdKcS0Hwjl2JwbD

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      IEProt/IEProt2.exe.tmp

    • Size

      39KB

    • MD5

      b813a92ff2dfc0b18b082d5bc1e174c4

    • SHA1

      deb80061027715f89eade268903fa216b889ef01

    • SHA256

      378004e4a755ba8c82949e4a2c20d33072087abd880ed4f066a5737fdf0d04af

    • SHA512

      7bbf4eaa5ae18fa738c9905b5dac4b7e1398b0068dfd7b1b3d3659ad13b23fbf584add5dfab59384c6625ce35e00ddad15b8ae1908cb7469110bb7b0d0f021af

    • SSDEEP

      768:9Df5cn+FtKOJfDYmaiYMmQIJW5jltQ24/9/4dZkOEgLwVOlLd0:9z5cAR7ZYMmfW7tQQhLw0w

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks