Overview

overview

3

Static

static

3

bec1352ddf...18.exe

windows7-x64

3

bec1352ddf...18.exe

windows10-2004-x64

3

$PLUGINSDI...sg.dll

windows7-x64

3

$PLUGINSDI...sg.dll

windows10-2004-x64

3

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...am.dll

windows7-x64

3

$PLUGINSDI...am.dll

windows10-2004-x64

3

$PLUGINSDI...ew.dll

windows7-x64

3

$PLUGINSDI...ew.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ta.dll

windows7-x64

3

$PLUGINSDI...ta.dll

windows10-2004-x64

3

$PLUGINSDI...ck.dll

windows7-x64

3

$PLUGINSDI...ck.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDI...gr.dll

windows7-x64

3

$PLUGINSDI...gr.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...nd.dll

windows7-x64

3

$PLUGINSDI...nd.dll

windows10-2004-x64

3

$PLUGINSDIR/stack.dll

windows7-x64

3

$PLUGINSDIR/stack.dll

windows10-2004-x64

3

$PLUGINSDIR/xml.dll

windows7-x64

3

$PLUGINSDIR/xml.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bec1352ddf847b05f0938ba334e797ef_JaffaCakes118

  • Size

    4.3MB

  • Sample

    240824-rfmk8stcrb

  • MD5

    bec1352ddf847b05f0938ba334e797ef

  • SHA1

    65f0d51d47619d7e2a2590f591535f70bb7aecb2

  • SHA256

    186761a11648dd53507440f3c9f045fbaf507a460f3696650e2496dae208dba0

  • SHA512

    44c4cb906558ac0da7db08ec92ff7dbe1a075cad65c3ee7409fe2957949ff1006078b94b547eaf3811998a8e4ac2d622fadff3e3bb24ce81ae6cfc2a4ef09012

  • SSDEEP

    98304:TuJmYdNeRQRkbYUnhs/qhgs9kSZhJyI4fOVPoB:Tu44eikbY4u/qhgFSZmOqB

Score
3/10
discovery

Malware Config

Targets

    • Target

      bec1352ddf847b05f0938ba334e797ef_JaffaCakes118

    • Size

      4.3MB

    • MD5

      bec1352ddf847b05f0938ba334e797ef

    • SHA1

      65f0d51d47619d7e2a2590f591535f70bb7aecb2

    • SHA256

      186761a11648dd53507440f3c9f045fbaf507a460f3696650e2496dae208dba0

    • SHA512

      44c4cb906558ac0da7db08ec92ff7dbe1a075cad65c3ee7409fe2957949ff1006078b94b547eaf3811998a8e4ac2d622fadff3e3bb24ce81ae6cfc2a4ef09012

    • SSDEEP

      98304:TuJmYdNeRQRkbYUnhs/qhgs9kSZhJyI4fOVPoB:Tu44eikbY4u/qhgFSZmOqB

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/AnticareMsg.dll

    • Size

      40KB

    • MD5

      0ab8dd4d754ee97df55dfefbc0836627

    • SHA1

      c5a2065ca4750c3246d96e2f740387faaad70c3e

    • SHA256

      e84362455ac00ade7f45c58485533d3a7cebf5bb0fa1d4081b6e375ec1e7f788

    • SHA512

      2a83535f31c1dc5f861d6d7cbe78a92684b91653df1260b78cfc7bbc54c2c9448a491083d5b9b4ffd03cbc057217c4bd8e0e989a4a3a992bad2cc838bd0d18ba

    • SSDEEP

      384:aP4rbSlT57iuBjR6cC7Xx4r7ruc8/l3jyuhSvr1OWuf+cA/8oPdZO:HyTBiufqx4r2RjrSz1OWj/8oS

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/ChkClient.dll

    • Size

      140KB

    • MD5

      3fe47e461bb686693cf440c8815f2a0b

    • SHA1

      9a7d27d47a542b83d00f1e6027ba4c22d496f887

    • SHA256

      5bdefe9a081e5e2f4af73891db6228a6b57e7dd320fac0ae233f5cd741db8a1f

    • SHA512

      687c57e17c4f527b90e8eafa9929fa9ee0a1fa82b2c9ba9c6a6385cfcb1fcdd1e09305acbf357cf61e7dd7e061d581a378d2661ed7df7dbfd554514f04646e61

    • SSDEEP

      1536:Ic+9HlMqT+GbwVG7MPHFdufRxYj3fnN8smruI6qlCMQwIZ7:ITM9VBPHFsrOPN70bHlcwG7

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/DLLWaitForKillProgram.dll

    • Size

      28KB

    • MD5

      9c4b8ec42d89f7557bfd90798ce52787

    • SHA1

      2376dde426ea65aa27c30e304086310605382475

    • SHA256

      ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548

    • SHA512

      17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7

    • SSDEEP

      96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/DLLWebCount_new.dll

    • Size

      28KB

    • MD5

      f16f5feebd9b431a8bc63456c0ad267c

    • SHA1

      acc75cfa3ed7888334aa2ccf305a6c6c58a08aaf

    • SHA256

      5417af0fc8284e9745650a55803bb34217e314096dc7cedf113c960624ae08ad

    • SHA512

      ed1e62d903b511a29abd5def4419b5afa63699ee2d1c91a9d884ffb01d7debe5981559574cac4885140d1f27f4275be56236f5c6f1c327147dcac8893f965512

    • SSDEEP

      96:3YP18J49uJPeaFX/0gOtJ/9nMjbnbk2Zl1bU6i9vtmAuSBudGaTA:3f1bFX/rOtJ/lMvbfJU6snpYdb

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/IEFunctions.dll

    • Size

      3KB

    • MD5

      9701818d39318145dd164794ef3a3846

    • SHA1

      7db701f8dc19163d46ba88e8b68d8dbf428a8152

    • SHA256

      3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a

    • SHA512

      d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      eef9e469e8a30717974499f277d97e2a

    • SHA1

      2d33c25984ebd9116beeb55cdde4c5c86c023e5d

    • SHA256

      1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078

    • SHA512

      d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48

    • SSDEEP

      192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/IsVista.dll

    • Size

      44KB

    • MD5

      344d13fd0fdd2d97e8d61960f40a8a30

    • SHA1

      3f0f120203005eea3e8ed1652a6ea8a607ea934d

    • SHA256

      17bb3331e2300aa01666fbee98b9552cec5e46212a4c5a340c0370b93df88f83

    • SHA512

      b4e49c58503532e270cc369f1cbd14d85edd46da5ab034dad730bd4297887dd541d445d2fbf205820e6afbbdba7ab6d5b78b694467554320fd6db8e06fe4f719

    • SSDEEP

      384:x4MHyTfkIbqaddF1qabhJfl7Tisz7c7t3TyAvdjWu875USXdvlHZYklIsg:FSTpbqaLfHJflCszOTbdjWR3Nvl

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/Ischeck.dll

    • Size

      120KB

    • MD5

      6c1f65ce96712e05f64c7a26b7adee36

    • SHA1

      6cea6c2618fb31902c52cb1d5fad04503bd34ed0

    • SHA256

      544f3c2c03f7900539d4868437f8e08204c0b4c79357af666a1fb48d406c1ffd

    • SHA512

      5244d26d013dc2c7083bd4c167cac99307985babcabc1806a898a2621fce6b73d256b21d549bce8744f3221a51017ea5f621d2f6f5cd5aae83ec21ae41e5d5a6

    • SSDEEP

      1536:1ki0RcSLEMxwjoTolPh9zyZFTEPmayYgH+t7Q0LtJhpdcOoyoJaZGUttW:IA/VHeZCP3ybHLK3hpdcO1oJaZttW

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      36KB

    • MD5

      6958016193a066833556992077bad4fe

    • SHA1

      5f564945936f99381d7e2408f034f97d069005a4

    • SHA256

      f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e

    • SHA512

      fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7

    • SSDEEP

      384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/SelfDelete.dll

    • Size

      24KB

    • MD5

      7bf1bd7661385621c7908e36958f582e

    • SHA1

      43242d7731c097e95fb96753c8262609ff929410

    • SHA256

      c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e

    • SHA512

      8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f

    • SSDEEP

      96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/UserMgr.dll

    • Size

      55KB

    • MD5

      130f66c0161e6da46744abe3c0be4d9c

    • SHA1

      d2a44a0cd07bc0c5d81fc0d056d6d45d200896ed

    • SHA256

      955705c8c7188d06af16849e5cc3ceae79ea5d0808cc2851630a54d54bbc01f2

    • SHA512

      915b9135da230ec8d3016ba83bd7102b3f8cb13050189a176f8d4d50363f13584fb971226458bc493cd2df27723c8ab7273effab7d6c6e14d49e735d24d7fac8

    • SSDEEP

      768:fThBSJtwQegACHpCygw5eKeK/B/viiTRvTkujLWf2UEHzDSZA7yM5jt/BJE4lV:7SCQeLCHpCyNV9ZTRbkuOQzyMVt/blV

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      cdff6b8f9523b6ef9f20fb5f9e90f1a5

    • SHA1

      b25f6e0a19b41ff0a12de8e98e3005bc119d34fa

    • SHA256

      80b2740fb3a21ffab022a96ce6b420019072f8ef3a048fd9dea4a5b64498c0c8

    • SHA512

      62585c6a6103aed10f9a79c016df8cb630c3e37715542b5f26aa1a910771540c9b323ddbba3329db0ecf524143f7a27b782e198ce944317f764be6b9d04b792e

    • SSDEEP

      96:W7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3trCUTMxVXw32E:IKgfwgcr8zylsB49lrCUTMxVX7

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/processes_second.dll

    • Size

      140KB

    • MD5

      f0a1eae66dd2f54fbe26c26db5493a6f

    • SHA1

      46d56b4c6694da1ec4d88b0a5b153dad02b5dca7

    • SHA256

      8fe4dad8f894bcdb9a83a9d302907de404695be4b50e619afd88f09d72583e69

    • SHA512

      e1b3c946e90fc30b6cdf953c8c7e96121b462bf8529099e0587f7f243b9d73eeba52b510dd2598937f188f7a35bc1e3785b7589ec6c249996a5795c10dafd1e7

    • SSDEEP

      3072:F+WSoWifAbFBgChOQcNg3kirQDNgv3gp9Ibzls8:iAAbFBgChOzNgUrDNgvgp

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/stack.dll

    • Size

      10KB

    • MD5

      0f61a81a543822de5fcb9a8a43f230dd

    • SHA1

      d01d4a0f542f3c654637fdfe5a574fe1f150ece1

    • SHA256

      46b4a72ae8590b0afb3304cc5c13db0502bc4c4cb02f64f37c79008c17db814f

    • SHA512

      596b7a897ba64c32e26ba6168aa3628aad37b187a9814a286298307d8c42eabf8e8a679dbda558f8b2cdc8676c94ec819256432aa5ad7c05a5387759262a4402

    • SSDEEP

      192:VBEc/BwQV5gTRk6uIu8uQubQuNu3fufuXuPDyuSuFujournu6udkuUuw0y9UrVo:VBEwBZmx97TSefeC/zIqoInvEkJ8y9x

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/xml.dll

    • Size

      118KB

    • MD5

      42df1fbaa87567adf2b4050805a1a545

    • SHA1

      b892a6efbb39b7144248e0c0d79e53da474a9373

    • SHA256

      e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845

    • SHA512

      4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d

    • SSDEEP

      1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10