Overview

overview

7

Static

static

3

c0e0a7acb2...18.exe

windows7-x64

7

c0e0a7acb2...18.exe

windows10-2004-x64

7

$PLUGINSDIR/7za.exe

windows7-x64

3

$PLUGINSDIR/7za.exe

windows10-2004-x64

3

$PLUGINSDI...pi.dll

windows7-x64

3

$PLUGINSDI...pi.dll

windows10-2004-x64

3

$PLUGINSDI...pi.dll

windows7-x64

3

$PLUGINSDI...pi.dll

windows10-2004-x64

3

$PLUGINSDI...ts.dll

windows7-x64

3

$PLUGINSDI...ts.dll

windows10-2004-x64

3

$PLUGINSDI...os.dll

windows7-x64

3

$PLUGINSDI...os.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDIR/aapt.exe

windows7-x64

1

$PLUGINSDIR/aapt.exe

windows10-2004-x64

3

$PLUGINSDIR/adb.exe

windows7-x64

3

$PLUGINSDIR/adb.exe

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0e0a7acb20c94a49755c3a24d992326_JaffaCakes118

  • Size

    846KB

  • Sample

    240825-q5gkvaygrk

  • MD5

    c0e0a7acb20c94a49755c3a24d992326

  • SHA1

    7cb027c6e17e13ebb06b56ad106084dcecea02bf

  • SHA256

    c0732539ae46059cfe11f00ebde539fda2e6a0f1cee6cc21fbc86a1387824f8e

  • SHA512

    42629270030190bccba7a6eaf988a4bc3f9eb4ec6e3eafa085667057e6df4c423237a7b8d0d31973e560c2ad8f1dc0c6e857bf75e1d2d2b88919e1affd68e8cb

  • SSDEEP

    24576:62FiTnWt3oxftDZfE7pO/v2lVn4dNo9RW8ienBTfQdVJL2EI:viTQo/lfTXi4dm9R2en1Qdq

Score
7/10
discovery

Malware Config

Targets

    • Target

      c0e0a7acb20c94a49755c3a24d992326_JaffaCakes118

    • Size

      846KB

    • MD5

      c0e0a7acb20c94a49755c3a24d992326

    • SHA1

      7cb027c6e17e13ebb06b56ad106084dcecea02bf

    • SHA256

      c0732539ae46059cfe11f00ebde539fda2e6a0f1cee6cc21fbc86a1387824f8e

    • SHA512

      42629270030190bccba7a6eaf988a4bc3f9eb4ec6e3eafa085667057e6df4c423237a7b8d0d31973e560c2ad8f1dc0c6e857bf75e1d2d2b88919e1affd68e8cb

    • SSDEEP

      24576:62FiTnWt3oxftDZfE7pO/v2lVn4dNo9RW8ienBTfQdVJL2EI:viTQo/lfTXi4dm9R2en1Qdq

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/7za.exe

    • Size

      574KB

    • MD5

      42badc1d2f03a8b1e4875740d3d49336

    • SHA1

      cee178da1fb05f99af7a3547093122893bd1eb46

    • SHA256

      c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf

    • SHA512

      6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c

    • SSDEEP

      12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/AdbWinApi.dll

    • Size

      94KB

    • MD5

      47a6ee3f186b2c2f5057028906bac0c6

    • SHA1

      fde9c22a2cfcd5e566cec2e987d942b78a4eeae8

    • SHA256

      14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b

    • SHA512

      6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584

    • SSDEEP

      1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/AdbWinUsbApi.dll

    • Size

      59KB

    • MD5

      5f23f2f936bdfac90bb0a4970ad365cf

    • SHA1

      12e14244b1a5d04a261759547c3d930547f52fa3

    • SHA256

      041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407

    • SHA512

      49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048

    • SSDEEP

      768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/EmbeddedLists.dll

    • Size

      18KB

    • MD5

      1aca48b7826d99451153060c8ffec093

    • SHA1

      5f17eb6f6f96094559c04b1597ceca7e167f28c2

    • SHA256

      ed3c9f1c788b25ea6f83b9f1ec4bf921603d350bdb467576e93c246379cc765b

    • SHA512

      58aa3e5256360a423b9456da9ad0713faecab96d0bbd019282f7cf1f86109b2030dbed6cb6313bc64fe432360ba85fb4d9d86d1c02c66be741149d5b7bac2b29

    • SSDEEP

      384:98BhDh2B+5VWsyFNA2QKgOLAY61EGzWSeEbw9s:IhDh2B+H43Q5OL/+EGzWS5b6

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/ExecDos.dll

    • Size

      5KB

    • MD5

      ebcf9f71d804abab3c2e5ce4c17dc22e

    • SHA1

      17d13084e75cbfa5fbfdd0025e9a0ee5772ae765

    • SHA256

      d387b725afbd2a6f9b44999278d21025fae55b391e45f7751b88dfb13511a993

    • SHA512

      5576396c2d885c039668d7f401eeee583eb4de39e8497c3aaec32d47f4417a522fe6786c111d50a5fba7570f50e84144ef3a8aea42677d170e79114343c3a4a1

    • SSDEEP

      48:qNpugCjmWaZ+rnHAUiP9JLw/RHFtly5vorpSpSi7+5HCAx31Oglt6Zlrz9QH96AD:r0W1nHAfPPORHnooAU3xYglt6WwE

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/aapt.exe

    • Size

      805KB

    • MD5

      26a35ee028ed08d7ad0d18ffb6bb587a

    • SHA1

      8a430e53507480c3121acb068ee3209ce0f4c5d6

    • SHA256

      105b822d3636b7e6b78b37a13508ccf1046f2990122ed8411874d3a377f00d02

    • SHA512

      c34a497a69c9cf78eea4fd0854b9a44976dbca86afb288a22315c1e86c17811512259da522f758c979e2f5bea57de8846c5f66d61588c669e91537ba400963a0

    • SSDEEP

      24576:zGLjAYoLIXOKHm9K//SzAHDXi7hXb0TI39:yLEYLm9MHDS0T

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/adb.exe

    • Size

      158KB

    • MD5

      5feac52dcc12aac39568660c8299b0f9

    • SHA1

      2e7df3e89fe0779d37b6daef19544e8bec20f1b3

    • SHA256

      8f4c36131c1a75506e0ac0e9528ee084425b4039027e81a778d057496050cb5b

    • SHA512

      fe90f2678b9a53f4c2ca809f262412eb6817530b55683fe92bfeb461ed8988fdb948d2d49f62e0ee02133e5df17ab3397daf60e3bf03b1f88db6684fbb641b5b

    • SSDEEP

      3072:XxR6RERIILUWM/yegPQ3uxY8ebRTR1aHaWO2fapUGpURnTBfL:GyRIOeg4+Tw/GNO2fapUGpSnTBD

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      acc2b699edfea5bf5aae45aba3a41e96

    • SHA1

      d2accf4d494e43ceb2cff69abe4dd17147d29cc2

    • SHA256

      168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

    • SHA512

      e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

    • SSDEEP

      96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX

    Score
    3/10
    discovery
    behavioral21behavioral22

MITRE ATT&CK Enterprise v15

Tasks