Overview

overview

6

Static

static

3

EditMod.vbs

windows7-x64

1

EditMod.vbs

windows10-2004-x64

1

Editor.vbs

windows7-x64

1

Editor.vbs

windows10-2004-x64

1

FrmGroup.vbs

windows7-x64

1

FrmGroup.vbs

windows10-2004-x64

1

Images.vbs

windows7-x64

1

Images.vbs

windows10-2004-x64

1

LevelEdit.exe

windows7-x64

3

LevelEdit.exe

windows10-2004-x64

3

OpenDlg.vbs

windows7-x64

1

OpenDlg.vbs

windows10-2004-x64

1

OptionsFrm.vbs

windows7-x64

1

OptionsFrm.vbs

windows10-2004-x64

1

PacCheat.exe

windows7-x64

3

PacCheat.exe

windows10-2004-x64

3

PacFrm.vbs

windows7-x64

1

PacFrm.vbs

windows10-2004-x64

1

PacMan.exe

windows7-x64

3

PacMan.exe

windows10-2004-x64

6

PacMod.vbs

windows7-x64

1

PacMod.vbs

windows10-2004-x64

1

SaveDlg.vbs

windows7-x64

1

SaveDlg.vbs

windows10-2004-x64

1

Scheme.vbs

windows7-x64

1

Scheme.vbs

windows10-2004-x64

1

TABCTL32.dll

windows7-x64

3

TABCTL32.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    aace5d86fb7af023e304843c7fc09714_JaffaCakes118

  • Size

    911KB

  • Sample

    240819-nfzc9a1dng

  • MD5

    aace5d86fb7af023e304843c7fc09714

  • SHA1

    f85ece9ced00ca710f7b559636185e22d6a5bcb9

  • SHA256

    be2bcf44deb0c5ca3fee6392f5ace502c5f2f05a7910048cccb1e00b6c1478cf

  • SHA512

    2af0a28ab5d1752460910b9362dc08e054a9093a1b6dfe3d3b7dd4b462b321da5d7f3a7a2bdb92ad8b6e3c82020debcf01e78f04f7e935f075cc3b3ac3b2209a

  • SSDEEP

    24576:qRG74mVwWkmpKaqnBiNOMOy6X6DUwEqGW:t4m5LpXqnBiNO+zwW

Score
6/10
discovery

Malware Config

Targets

    • Target

      EditMod.bas

    • Size

      5KB

    • MD5

      98003efef9f8fed01f9539ea989cb9a6

    • SHA1

      a98d0cb9aee057dc2638f3a40c049f05fb5b9432

    • SHA256

      7a52c835ce7edc9acc090a5211b221e4429673b0abb7109223bd26ffe325023c

    • SHA512

      49a167790e421bf3ab7311af3e4dcf7e0bac71fb2f3cce9390ed7f79241e759444353afab4cf574201d04d02292620b585a5c313fdb739a2f7e25fcdbf3327cc

    • SSDEEP

      96:AZJwK40PYKL1gopc3yVPSr05mJlSQgpzhX5XbSQgpzBdXRXOTAXzk17sEFjSQmoL:AZNPYCbciMAfhX5XKBdXRXIwtAao9

    Score
    1/10
    behavioral1behavioral2

    • Target

      Editor.frm

    • Size

      20KB

    • MD5

      9ce8571fe1623ba835ede8cae95aea87

    • SHA1

      0985d371a0969fbb3e82ffb9cd0e46ec158946f6

    • SHA256

      4aef657a346ae802129c302afcf99ff0c14420e8e78ce1e495a1ffe4bfd782f5

    • SHA512

      347e7edff661ae8d11030cee1e35952b0f5bcec4493b0cba0aa3df37f578797f86b1c7e5b83c332f875a1cbefcde4a802081b3dbe8e64fac0120b964cfda40df

    • SSDEEP

      384:haWYeyNmENVWEN3SEN3fEN+8ENbkEN13ENytEN6mENFCothtQpyA2BtDC4KiUo+i:haWYhNmkVWk3Sk3fk+8kbkk13kytk6mU

    Score
    1/10
    behavioral3behavioral4

    • Target

      FrmGroup.frm

    • Size

      7KB

    • MD5

      be694b10d510f1e7ce720c620e5d538a

    • SHA1

      457598081baed82f3532ea98ff7661178ae90b57

    • SHA256

      457e144006607d0589ca3fe8e4d0dabbc09ec18af45b122653ff3e2c065fdee1

    • SHA512

      3cf498e8678cb7bef6fb3b1b8a58083f61cffc7f7fd6985efde12271edc003c3de61f3f2884e213db171f3c939d70e77bc29088822d7713d9f113a1f85c2dfb9

    • SSDEEP

      96:tLqZHa5fnEdYQH/01HCgVh75ODKXxerZUYRNTxcLS/4VfVeDFjjva81ApKNp0szz:hqYG/iuQSTlwaJBAINFS7xUf

    Score
    1/10
    behavioral5behavioral6

    • Target

      Images.bas

    • Size

      3KB

    • MD5

      2a5d1dd38231e8ad2c2877963863a00d

    • SHA1

      fdf8fca1c40e75abdb37e64b60d5217a0aa39eb5

    • SHA256

      17675a9f84abc91ddbf7ec2eb29a26f134dec50f706fed78da6e702495dfeb72

    • SHA512

      7ecbfd8f3469a65adc0776fc5ca4e3fe5d085251bedf1dfc84e3befb6fcfa028f2c41f58b6b281c3440f8daf44f5162a859d8a521d1ba59660f74934fab67543

    Score
    1/10
    behavioral7behavioral8

    • Target

      LevelEdit.exe

    • Size

      128KB

    • MD5

      cc29ed3278ef02b3705481c3c8f4ff9b

    • SHA1

      03a86791e6a7b6642e2f717aad9e4652761e0620

    • SHA256

      2fa8deb5426873f6e25f03d69f8b185c44a4d07fbb20a9929cc0dd2466027dec

    • SHA512

      ba99f14c925ae76bd1db46e2acd71bc4ccb7c092c194508d47cd43f8ba595042fdf5d49c36b2ffa8a6df67b67593e10f377df37171833aa9ec25558fccd50b42

    • SSDEEP

      3072:2Lu6e5MYu65u6IK/WB+3QOw627NlkWXXeIecAqKDVQOXbUDaBom6:2LS1P3QO2aZqKDVQOXbUDaB

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      OpenDlg.frm

    • Size

      14KB

    • MD5

      7fe6ccd395549aaf68d835c4326728d2

    • SHA1

      35aa72b74dca72534a148d4854f4853d23d15f3d

    • SHA256

      4c570cf0bcc82f009c3f7cf59a0581fa1363cfb05a4b76d795a48907a40c4994

    • SHA512

      ca1e1560ce938eb69d6d382b7a236d5144ebb5a19c87ede46bb54bcf252ff69514752173168034a6d9a052a94e17008de5a00a9eba667d9049a1d6ddbf554511

    • SSDEEP

      192:hCHys8w/Xm/N/a/5/Q/j/t/6/z/Xd/+/x+GnENi72ZNnq+OKEN+Wv:hCHv/xqlnENvZNq+OKEN/v

    Score
    1/10
    behavioral11behavioral12

    • Target

      OptionsFrm.frm

    • Size

      30KB

    • MD5

      239370b9ad704cf61aae6d57349ea7cc

    • SHA1

      c77bbe72dd97716cefe0a7151b64702ad1bb81bf

    • SHA256

      b1334ac9f425ed32775d960dc75e9dbf78c6fcddf90d1c5a52fb8be00279e066

    • SHA512

      803c26c8a108c525eb0bf705267762ce2a715e0bd47cd633f4653fb09aa3e0dda07efff649c775ac55baa4a5261708a3f6a9bf5b285dab3daaf75946cc88366c

    • SSDEEP

      384:Wa3gbApzdrnENjENsENMJxENDENMEN9rC:WkgbApzdzkjkskqxkDkMkJC

    Score
    1/10
    behavioral13behavioral14

    • Target

      PacCheat.exe

    • Size

      32KB

    • MD5

      a683aa3bfc0ce54034ae4493096c019b

    • SHA1

      a75b693cd26b268e51d1efbf46da30f2aad8b782

    • SHA256

      dc894c5bbe38eb7b07c91cbc08dc9337cdb79e5973be6be5b1f4549846bb6b83

    • SHA512

      b34c4778b8ef6a8a85beb1cbac60f9ba2e16db117739822fb7cd642eaaa69996cc2e71d55c6953686d9c88c5dfbcf88845c1839ccb8f52077947ebd2442703ee

    • SSDEEP

      384:/ToCq2u6bAvj7kYYxc1v1dpYyi9nRbOdGY3f7LB47hWo5XDSa30S7F64:/cCq2u6bajv71iVIdGY3x8D5j7F64

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      PacFrm.frm

    • Size

      50KB

    • MD5

      89c4f9ab07c26bb9e2d4ffcabd84cab0

    • SHA1

      9ba3c9c9a0a26cfaa3d40bd90d0baaf308225709

    • SHA256

      87bee2b89dda62ad9bc7cc15bac9517761a8660c1e15b0d74fce601ed9920277

    • SHA512

      9372800b7b15b2fc74142bcc88b751f131d9e8f2208e4e169b6c810e61bc2bb91d72cb346e05745a245e3fde3add6550fe50cae9d15f9c829dfd0f8195df1913

    • SSDEEP

      384:hQd35gNxNyFNQqiNL/NDTNSNdNkNpXq9PCllyQaNuwGN2im1OZVMmNoLNOFUvZzl:hQdGL8xuLFDB+PEkqN2QM6o5OFQb

    Score
    1/10
    behavioral17behavioral18

    • Target

      PacMan.exe

    • Size

      152KB

    • MD5

      e5a74bbc16b16736aafe7ec71e6a6f0a

    • SHA1

      14189f1d769d971fa4d52cdaa476cc2c5d8bb0b3

    • SHA256

      136abb5c913de5bba67d277dd0955f7fd6ef4b519af3099066ee03a475f31909

    • SHA512

      658fa606f3b31f7de87a813df509c7b7d8868ae19e51a591299e552ce7e5e1da1211fa774c051413259d815fc2d244008d662f1fff08c643540c8be10f0dc431

    • SSDEEP

      3072:9M0AoUzmu6Xu6MPC2EFcq8W6Kgnj55icbUiXvDHR06:hmmDAPHEFcq8W6Kgnj55iiUiXvD

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    behavioral19behavioral20

    • Target

      PacMod.bas

    • Size

      15KB

    • MD5

      8ab853a3ba36b74f24be0170ece1ad32

    • SHA1

      769f6d82f92eb380afe1dabb67927b1496baf685

    • SHA256

      f7bfc348138ff0bb2e6e6aacaf3b12bb0dda7bc8331ba4ae37fce6a347f9fa3a

    • SHA512

      19173dfc377812d0a8103d86088e493b076f28a7f69e859519bdb04522b74082d8c4a3b26e02675dc6f8d6e4546128ca376262bc56ae53c1ae0a988d36cf55f2

    • SSDEEP

      192:LYW61UVMffXEf7l1tkk/x3DqnoL/vNe2/TLq/C9C/caV/0I/lW/Qa/vA/gK/PRHN:8Zsx2kBDkyNIM8BQCN4ZNNi7x

    Score
    1/10
    behavioral21behavioral22

    • Target

      SaveDlg.frm

    • Size

      14KB

    • MD5

      c97ffc59fabfe92b4758a96aac79c0cf

    • SHA1

      2ff2855f10cdd71c7187892727366192c7594f4b

    • SHA256

      abd0295efad21c510b5b692bd6ece54e004618c7fd7afd02bebfc4e47e569d0c

    • SHA512

      b77f1db87f8ebd4cb80e853bcdcad9e6ad9ea41b0b0d9f1f637a6f313bc6c4e656179dd89c56dd01d8ac5a0be193a35254a3f7f93c87269cfc538bf4bc751907

    • SSDEEP

      192:hhAw/36/E/7/b/e/F/b/C/x/+/7/nKCZNsJCnENapgJVSGnENiC:hEVZNsJCnENJxnENd

    Score
    1/10
    behavioral23behavioral24

    • Target

      Scheme.bas

    • Size

      3KB

    • MD5

      e2978e2a4eb0a646ff9a433213e16b8b

    • SHA1

      f79000c6845f24099c74a4fc08235139d34a50fc

    • SHA256

      858514effb23ae9735b13545f737586985f46c632c79d6d6be39ecfdd64d80fc

    • SHA512

      898290f33134630ddca7ae2ddbbc04e61e167558797dfea11ea4053a7e6ac4807b0701bbd96cb64a7ac9de87c19a85a1ce10a1a5d9e5b650e94083b4cd29d15f

    Score
    1/10
    behavioral25behavioral26

    • Target

      TABCTL32.OCX

    • Size

      204KB

    • MD5

      2bae02cd88d9ef0c03bdab250904f802

    • SHA1

      ff421bffb17f2dafdf028a198ed6e540e0c8dce9

    • SHA256

      76f99cb0983a76385e55dca92577bb53de488aafdf0d6ffcbe03ec5fa85d15c5

    • SHA512

      faed7f90b18bdacc68e44a145e81be967cac163d44cbfef6ec32d36b53c7ae57d3b8e7a5526c0d6f97226c19432c70c390068d505ed69c6f4ceaa9e63dda745e

    • SSDEEP

      6144:9QLCiNdwZReDv/ofRm6jHCPrFBDLR44WK/:9qdasDofR5HCP5k4WK/

    Score
    3/10
    discovery
    behavioral27behavioral28

MITRE ATT&CK Enterprise v15

Tasks