Overview

overview

7

Static

static

3

a4b4b07ab7...18.exe

windows7-x64

7

a4b4b07ab7...18.exe

windows10-2004-x64

7

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

NO$GBA.exe

windows7-x64

3

NO$GBA.exe

windows10-2004-x64

6

NO$OBA.exe

windows7-x64

3

NO$OBA.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4b4b07ab7d2397d625042e10a5aeb0b_JaffaCakes118

  • Size

    20.3MB

  • Sample

    240818-av6tzswaja

  • MD5

    a4b4b07ab7d2397d625042e10a5aeb0b

  • SHA1

    bd519fd230a088ea0fd3f7753a78c55ca71fbee1

  • SHA256

    291f6939a1ef34eabee372dfbe80d2a14f65a1e4d9512661e3eb25330eeb288c

  • SHA512

    df9721e0271dbef550a0e17fb53f9d6ee0ff16fe5e0ced23bd85e4f61b46159fe6c2e21979b0fa3925ef4d4f6dc5cbe2ca1547c23fd42b2f0180b4d9105a81b0

  • SSDEEP

    393216:NHTfW4xG+zs2T+6COXEvAwaKNasiS8aBWFZBj6qhU7hBzBL3X/l2do:NHrGos8+kXEvZxivaBWahBNn/l2C

Score
7/10
discovery

Malware Config

Targets

    • Target

      a4b4b07ab7d2397d625042e10a5aeb0b_JaffaCakes118

    • Size

      20.3MB

    • MD5

      a4b4b07ab7d2397d625042e10a5aeb0b

    • SHA1

      bd519fd230a088ea0fd3f7753a78c55ca71fbee1

    • SHA256

      291f6939a1ef34eabee372dfbe80d2a14f65a1e4d9512661e3eb25330eeb288c

    • SHA512

      df9721e0271dbef550a0e17fb53f9d6ee0ff16fe5e0ced23bd85e4f61b46159fe6c2e21979b0fa3925ef4d4f6dc5cbe2ca1547c23fd42b2f0180b4d9105a81b0

    • SSDEEP

      393216:NHTfW4xG+zs2T+6COXEvAwaKNasiS8aBWFZBj6qhU7hBzBL3X/l2do:NHrGos8+kXEvZxivaBWahBNn/l2C

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      3KB

    • MD5

      9c3488b5e9655d1837c3963ecec33f70

    • SHA1

      f0fa9b4c29e75c6e4419c4633d09f2797aee2ef3

    • SHA256

      05ef4beb7fab9d04c1fb251874166fa2d73a34b4a7f2b145d37a2fd00c88979a

    • SHA512

      6af9f88d65d2279a71620f2a656062b1737b3a9a1692ed4e5887bdee891ce08d21c5c0b25ab3acbe6da9fe255dcd7f8a517c2751e73dc56add216740c945e4a7

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      b18dfaded8f6d2380fdfd8f6b6969211

    • SHA1

      969fa0e906240ab1123254feeb833c275626cf76

    • SHA256

      747d0222b652dbfc85e0de4f8486473662d325a55e32c7eacb91e53e37ceba58

    • SHA512

      25fb09b8657997d31e61c908f1cd08357c1a1b68bbb1ba377e87b6a3eb347a2ef96c1a771b6c4332853abb33728c55c83efa73df5da03f3dfc132f8a69a2886c

    • SSDEEP

      192:66JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTLK72dwF7dBdcQOz:66JaVh4I5rpPbTL+BdhO

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      9b17a13f814b137f88b961c087858063

    • SHA1

      c290dd3139b79aa340aec3ed3d674160433035e1

    • SHA256

      e54792a179a06acbb9b69c117ee804dce070505d1853d6e7d512f2a055a801b2

    • SHA512

      3a625f5f13e344c24973c79c074d1ced4d9206f87f392dc7c8f0c116d0f2b878b60340e2377d0240c47f0e34e25e4e3af8b196bbca1c6a29a0f51d8408e8b0ec

    • SSDEEP

      48:SnNQ/z+vUML8eYXICmlmGYKHz0JSpXSxwo6mpwzcR3RqG8aEJcABofgMGKO:Bz+MM4eqmvz0JScx56mpwzAhWcGV

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      810f3a0aefe36a9f63e29e604bea91a9

    • SHA1

      2559d3d4adf51f8ecbe2d07e669e344eb7d0bd80

    • SHA256

      f160eb7a1b4eb8d2e99e7424ae058acd81ba5019e43cbfa0ce81e3102b356779

    • SHA512

      836b73c38ab60260e1bc81ebf8347e14d02453fc361b7d6f10f137287b8189f8bc43758ce2d9def8fd1c71112aab7ef1930af2d64ae69f6d4e58a6fe17b310bb

    • SSDEEP

      192:CO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1argMO:XKAFERdlxhGRYUzqZar

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      NO$GBA

    • Size

      587KB

    • MD5

      857426b2198ef1760cbeff7f29e99330

    • SHA1

      20edfc46b3ae0d9f5fba7b7ac44a1f764c362107

    • SHA256

      8db90be0b3b53386bc722964131f00504da6cba33a4a7e64d8fa4b48cf7e7a1b

    • SHA512

      48a9c6a5a7eb28ddb3f0c29845f40cd2acd5f3986b6a502f5b08bef792553b876b7730b9a3fa42cf0bf4b9ecab522b912a2d2975b0c2508393d224b3fb61f29b

    • SSDEEP

      6144:lTWkUUJ9izBIrXkOwNQ7jDWHztCOf4rjPZkPDmbUQLS1pogpdcgB6q/iNHFN7GR:lTWRUDe4nvbzucgQNF8R

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    behavioral11behavioral12

    • Target

      NO$OBA.EXE

    • Size

      2.4MB

    • MD5

      f42f1a048f1c76a4255484081c507395

    • SHA1

      939315340bce5ce2fa0d14b71a2a4baab8c141b0

    • SHA256

      75c80178e46524dff4d9805619d42bf9de47da0f41493b57bfced7770ac0d624

    • SHA512

      ddba51d7bede19f7c221ea2baa4dff9af50399550e72b9d1c41b766236bc6adf329d48ae9c119339b079dc6185eca38c428b99e6f081f0377aadd33eb59a161e

    • SSDEEP

      24576:iAFITrkGIz36Q2sbIfi71i2HNtvjexqmTEC5Nn6b6cQiSH5REzwD813MzCEHby7U:iCwrkVLbL1frdCYR7SbHuEHG5CP

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      uninst.exe

    • Size

      66KB

    • MD5

      dd12ad55b80356fa4968e59a16e3d8e6

    • SHA1

      37e71ee545191e4154474754f5b7977e1aaacf01

    • SHA256

      f5e91464f872d6a51b48d049b171932a8203352094cdb6b5fdff1599d5cd12b4

    • SHA512

      8175d9964bed2d8a6351678bb54acf59b23a3c6b53f9459bf5ce1df38ad1127d116a4475ce4c8fded42d91bab0a46ed1d2b9bf6e8548524d398ebdc87bfec0bd

    • SSDEEP

      1536:WRhoEXBpnbfRpQmJmI1ECy3lvUyS1vg3XTsJLYKn:WjJ7nbppQmJvEx1vE1vg3XTsJsKn

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral15behavioral16

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      31KB

    • MD5

      83cd62eab980e3d64c131799608c8371

    • SHA1

      5b57a6842a154997e31fab573c5754b358f5dd1c

    • SHA256

      a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294

    • SHA512

      91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9

    • SSDEEP

      384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy

    Score
    3/10
    discovery
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks