Overview

overview

7

Static

static

7

a560ac8a03...18.exe

windows7-x64

7

a560ac8a03...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...on.dll

windows7-x64

7

$PLUGINSDI...on.dll

windows10-2004-x64

7

OpenShopperD.exe

windows7-x64

3

OpenShopperD.exe

windows10-2004-x64

3

OpenShopperSvc.exe

windows7-x64

3

OpenShopperSvc.exe

windows10-2004-x64

3

SQLiteEncrypt.dll

windows7-x64

3

SQLiteEncrypt.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a560ac8a03166caf7c4d218e058a8b37_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240818-e2fctsyamj

  • MD5

    a560ac8a03166caf7c4d218e058a8b37

  • SHA1

    e82181c268d28d3e731d85162702728027cf6b20

  • SHA256

    2337fb32f488b18ac24f0b38b90afc0d27d169a27af068018968b2f8226846b1

  • SHA512

    c2144383dbd15909cfbafe4b142c4275621716ca93899590b426eee72da8a4ee2ce2dc5c3354c22d5a2a13c6038a0743e4a25c618097e1d2942da282512b0589

  • SSDEEP

    49152:uTL2AHQ3gY2N6tg3JAslJElHEKbp8O/QK:u6312NYg3fEZv14K

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      a560ac8a03166caf7c4d218e058a8b37_JaffaCakes118

    • Size

      2.0MB

    • MD5

      a560ac8a03166caf7c4d218e058a8b37

    • SHA1

      e82181c268d28d3e731d85162702728027cf6b20

    • SHA256

      2337fb32f488b18ac24f0b38b90afc0d27d169a27af068018968b2f8226846b1

    • SHA512

      c2144383dbd15909cfbafe4b142c4275621716ca93899590b426eee72da8a4ee2ce2dc5c3354c22d5a2a13c6038a0743e4a25c618097e1d2942da282512b0589

    • SSDEEP

      49152:uTL2AHQ3gY2N6tg3JAslJElHEKbp8O/QK:u6312NYg3fEZv14K

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      44KB

    • MD5

      3599d30554ad65dc29fc689217d2152e

    • SHA1

      8f5fcc313b667a1de2d56573bcf98d43fd0d4ff9

    • SHA256

      1af3ac7d3176af42e8594ba0c33821d3318f4eea5cbb799bf8fab58e480efe0e

    • SHA512

      846776b1d908b5204667715ffdfd3a6c76dface1677e8b1e5156ceac2ef0a739f68b48ccbb919c9e08d6ff359a93174bf0b90def7d48cee54cd3c41d8d8575f2

    • SSDEEP

      768:oY6+2hD1lu3SFh80Z9pe7nJRJ3QN8DOUVowlo+J:76xhZlM0h/9panJ73CSFl

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      e54eb27fb5048964e8d1ec7a1f72334b

    • SHA1

      2b76d7aedafd724de96532b00fbc6c7c370e4609

    • SHA256

      ff00f5f7b8d6ca6a79aebd08f9625a5579affcd09f3a25fdf728a7942527a824

    • SHA512

      c9ddd19484a6218f926295a88f8776aff6c0a98565714290485f9b3b53e7b673724946defed0207064d6ab0b1baa7cb3477952f61dbe22947238d3f5802fa4f4

    • SSDEEP

      96:57GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgN532E:VKgfwgcr8zylsB49Ud0qJVgNQ

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/version.dll

    • Size

      6KB

    • MD5

      ebc5bb904cdac1c67ada3fa733229966

    • SHA1

      3c6abfa0ddef7f3289f38326077a5041389b15d2

    • SHA256

      3eba921ef649b71f98d9378dee8105b38d2464c9ccde37a694e4a0cd77d22a75

    • SHA512

      fa71afcc166093fbd076a84f10d055f5a686618711d053ab60d8bd060e78cb2fdc15fa35f363822c9913413251c718d01ddd6432ab128816d98f9aabf5612c9f

    • SSDEEP

      96:nPtMckE1e91BopVyXwUhn3f1I0vOKeoqO4d8QvS9:n1MMuOUhdI0c04yV9

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

    • Target

      OpenShopperD.exe

    • Size

      1.6MB

    • MD5

      eee0486e34770efb2ea84cb4e9999c22

    • SHA1

      f80452c0d90dce1ea1dd73a35697f4c63db22287

    • SHA256

      014eea723eee996a66a002aee0c0d77b682e19a0335e81538c16a8a33cd59051

    • SHA512

      2b36e568acc321c112d9327ff5234077fd21adc7c7a0a047cf70c1ab1ff5f5d6fe8b82c97087e47531fc452ba6b079cea31cdd1a2f3aa25dcfac6a4c82438550

    • SSDEEP

      49152:/aNA+WxLtIt5x/z9fqA5tdWmTXm+DKDHZN1S7yPGzpptn:/AWxZ4F9fqAjdWgXm+DKHZeu+ppx

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      OpenShopperSvc.exe

    • Size

      1.7MB

    • MD5

      f5330071bc375ebdf2f54cf598c8b66f

    • SHA1

      4e71aae302de821185a7ada242be70f91c1e829e

    • SHA256

      6f7f7949fe499f1ed597debc0a9291bcd2dc657d996ea88d5779a1e8aab8eab9

    • SHA512

      112f2130c300589ad44bdd48f6c897191cca113e59be8f3173e30dd74562b277c8d08b34691ae7e7e0ab86dfd3a965864be35cb0cc7c3e74173c36a5cab67ae3

    • SSDEEP

      49152:Y9hSxtGez/lWJNTv/vgECWxgmH8aaslVnLA5kFzAiDEv6ztFM0MH:Y91eWNTnv0WxgmH8anznM5kpLGkF6

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      SQLiteEncrypt.dll

    • Size

      518KB

    • MD5

      49cd32a6169dbb3d34e50b6c15cce74e

    • SHA1

      d6f3b8430ef8d76385880d70df89a576686b4ea0

    • SHA256

      0a84312e6164df8cca1d528642e065fc52d6dc07dbd7d80ead4c0682b3aa6d68

    • SHA512

      d81f1598731906d6c39fb9d9583238660de78bf2aa172a235b644f0cdedd9444190344cfc7ab8b0cf625b1c4faeea747953b1ac3059d208560d9cd30609a81b8

    • SSDEEP

      12288:3HQQEuaVa1j3j8rXvaabQXzaBA2TjE/Qpt0E3/6:3HQ3VaRj8zpbQXzaBZjOF

    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks