Overview

overview

7

Static

static

7

c93fd144d6...18.exe

windows7-x64

7

c93fd144d6...18.exe

windows10-2004-x64

7

$PLUGINSDI...nt.dll

windows7-x64

3

$PLUGINSDI...nt.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...eb.dll

windows7-x64

3

$PLUGINSDI...eb.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...nit.js

windows7-x64

3

$PLUGINSDI...nit.js

windows10-2004-x64

3

$PLUGINSDI...ge.dll

windows7-x64

3

$PLUGINSDI...ge.dll

windows10-2004-x64

3

$PLUGINSDI...n12.js

windows7-x64

3

$PLUGINSDI...n12.js

windows10-2004-x64

3

$PLUGINSDI...ime.js

windows7-x64

3

$PLUGINSDI...ime.js

windows10-2004-x64

3

$PLUGINSDI...ket.js

windows7-x64

3

$PLUGINSDI...ket.js

windows10-2004-x64

3

$PLUGINSDI...ftp.js

windows7-x64

3

$PLUGINSDI...ftp.js

windows10-2004-x64

3

$PLUGINSDI...ttp.js

windows7-x64

3

$PLUGINSDI...ttp.js

windows10-2004-x64

3

$PLUGINSDI.../tp.js

windows7-x64

3

$PLUGINSDI.../tp.js

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c93fd144d699f2927d058aebb900360f_JaffaCakes118

  • Size

    694KB

  • Sample

    240829-vlkklstgkq

  • MD5

    c93fd144d699f2927d058aebb900360f

  • SHA1

    87c60e67d72631511ef51577bcdc6b55fb9514c0

  • SHA256

    0883ebff9d0145e32b898c88dc991447b5a94700cfe5cdf194173962bbb7b0ae

  • SHA512

    8bc02dc33cf472844d7ac6e449262f0a871cc4dd462463a288b51de2a82029eabbe2b42f46a76334d46d65a8fb9b5f0e1cb11638dfbdee652d8fadadf76e55eb

  • SSDEEP

    12288:mN4brFaqyM1RDKxhMUi3gZimF5mDxpC0bvsS6SE0tBcgcDK2jm9/a:maF5yMrmxigZiFxpHZEMBcu2jKa

Score
7/10
discoveryexecutionupx

Malware Config

Targets

    • Target

      c93fd144d699f2927d058aebb900360f_JaffaCakes118

    • Size

      694KB

    • MD5

      c93fd144d699f2927d058aebb900360f

    • SHA1

      87c60e67d72631511ef51577bcdc6b55fb9514c0

    • SHA256

      0883ebff9d0145e32b898c88dc991447b5a94700cfe5cdf194173962bbb7b0ae

    • SHA512

      8bc02dc33cf472844d7ac6e449262f0a871cc4dd462463a288b51de2a82029eabbe2b42f46a76334d46d65a8fb9b5f0e1cb11638dfbdee652d8fadadf76e55eb

    • SSDEEP

      12288:mN4brFaqyM1RDKxhMUi3gZimF5mDxpC0bvsS6SE0tBcgcDK2jm9/a:maF5yMrmxigZiFxpHZEMBcu2jKa

    Score
    7/10
    discoveryupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ButtonEvent.dll

    • Size

      4KB

    • MD5

      fad9d09fc0267e8513b8628e767b2604

    • SHA1

      bea76a7621c07b30ed90bedef4d608a5b9e15300

    • SHA256

      5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2

    • SHA512

      b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/CustomBrandingURL.dll

    • Size

      5KB

    • MD5

      e4c1b74859c17671ffe1c0602fd56b44

    • SHA1

      15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1

    • SHA256

      2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156

    • SHA512

      9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925

    • SSDEEP

      48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/CustomNSISdl.dll

    • Size

      40KB

    • MD5

      bb81b9946ffc1e50b7a052cd00ac2690

    • SHA1

      0deb5a4c1effa39d22e89199dbb1e6695246848f

    • SHA256

      dcee4695192b17a77ca40f63234298fa02326bde2a2a34bab373ac5cc2fc5f48

    • SHA512

      9c1e9fcac43aa41cf6db56557a7d720db52013b78e048ffa821e608868c2bc97d30aa9087047a5faaaed39655759da0d6fd6097f273c30ce51b0f0963c8a739c

    • SSDEEP

      384:kBrBOvI88qsfnZsFTyQ0mipmycAC/hZAOT8pA40PIL1lBlE:kBrmB8qsfnZeTyQ0mZ7h26g1d

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/CustomnsWeb.dll

    • Size

      42KB

    • MD5

      f705fa42cb1edf73153cfe6bef657387

    • SHA1

      24462c7b144ecb7778ca7a93b9e1dd62464ea81a

    • SHA256

      39fefafc4ede6838061b804a44b0416ed4929c3c3ff9e64b1e0956186734094f

    • SHA512

      d993d37b53b60a009021154e5032965c29789fbb8d7b0907dc0877f36abe5d7456a33a8e3111158ee82fd306d24d3aeabe81be776ca5d2f09b8413ff437aa936

    • SSDEEP

      384:Rl9jSW3OJO9zbkU3UjVzU2QSvA5q/8Bigip:RHjxOJO95mVzjQCAU/S

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/FloatingProgress.dll

    • Size

      25KB

    • MD5

      5f11bfefee27008b9ac247aa401605d5

    • SHA1

      a7faf8701a2e9675df065eaf2ffdf8acbaf4c0f0

    • SHA256

      aacd01fddcfd56fbeadcdd83e733778ca45ce38ad8145196f0ac2b4415018762

    • SHA512

      574c2fc99f342e1bb5e98bda016e63294494eb7bf1e6b080ae7683b0ca359c5a2fe4df222e55cb5343b71134b16c2b5f807ac703e8ec547a99bd74392f880c2c

    • SSDEEP

      192:+dEyZh2Poi73yFDoUjSFWbY3Lf+25meJVOuN+Sx10mvmWc4b6TY:+z72l7Ifc7fV8C+I2mw4b6T

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/GuiInit.lua

    • Size

      72KB

    • MD5

      eb32068c55b02f9af3c910e818ce4c1e

    • SHA1

      d7e93973d0a93a2dd7785ed66de4460b0d4d5af9

    • SHA256

      85903f445dcf37805aad36553d0fb52f77e303764b4defdbecbce162832073c2

    • SHA512

      9a584fbdd2ed15602bcfc5db86ccdb620b91b30dc928efdb2a2afc22dbee3f0662c03f7a8d663fecb43bc7fb9deaf04f1961f4fe6ac50e6e2cb3eaae7c8353de

    • SSDEEP

      768:ryEpUxaHpHIqRS60guu2IsIsEqPi/bmT/MHkkR/v63b+9+LshrrcLSopwWXT6ERw:rzRkgu4BR5mTD3b+prEBpww6Ei5l

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/LuaBridge.dll

    • Size

      12KB

    • MD5

      9781b7bb06ea11ebce5dc9d57b3437a3

    • SHA1

      604123977fffadebfefccae08df6b8e2e5dbab82

    • SHA256

      c26d867114a04c677ef9ac35d83c2d362c1fb9ff8d46abfb785d71a48cb9c309

    • SHA512

      666125abfb144665506e1085793656f31708211b940efca8188a5b20d57a058dcae10ec274a7614450f7b66854c9239c2838e61b3721c10482710a2008b681d7

    • SSDEEP

      192:P4OMsEUVhX/Lk4qmpG1KN8v5Qu1Pbt91TVwxlXMmt9bwg6os4Ian:gJs1bvLbpYaYFPRKl8HgPIa

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/LuaSocket/lua/ltn12.lua

    • Size

      8KB

    • MD5

      e440044afe6c761507a996b5b45ab0f9

    • SHA1

      ef772c758fd5d6098b41375f35ac26f3963cc306

    • SHA256

      b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29

    • SHA512

      8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4

    • SSDEEP

      192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK

    Score
    3/10
    execution
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/LuaSocket/lua/mime.lua

    • Size

      2KB

    • MD5

      4bfdaaab9014fe129bc6388fd5687c8f

    • SHA1

      2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a

    • SHA256

      e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a

    • SHA512

      3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607

    Score
    3/10
    execution
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/LuaSocket/lua/socket.lua

    • Size

      4KB

    • MD5

      74dbe1060e91112e1c21ef9870b4a587

    • SHA1

      86afb6aecb0a8387ffa5dead1cc9808332f94310

    • SHA256

      15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d

    • SHA512

      73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723

    • SSDEEP

      96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0

    Score
    3/10
    execution
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua

    • Size

      9KB

    • MD5

      4f83a72dc82a78cad6eb7edbe7d2f152

    • SHA1

      486dd564c3b2ac467e3eabfad806308f14fabb5f

    • SHA256

      26167d7c0f511cca7691ca5ad6ebf85b4427b94ef12e110ba1da75f023db8acd

    • SHA512

      a5ca1c8955a450a727950d91b720895db55f425f2531bc2d2d17034363961ed52b6cc086289f966ac3c27b056452ab5126ec7d9bb34cf5a92fdf0f725f40781d

    • SSDEEP

      192:GsooRaLonJfMxBs6gZO2zMAcTcGZqx6iOaBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7iOaBRkfYtppO

    Score
    3/10
    execution
    behavioral23behavioral24

    • Target

      $PLUGINSDIR/LuaSocket/lua/socket/http.lua

    • Size

      12KB

    • MD5

      7bd12178adca19b584ed1320fdae1e81

    • SHA1

      839753d73984bda68047585bbc36f9344f51c34d

    • SHA256

      d10fbef2fe8aa983fc6950772c6bec4dc4f909f24ab64732c14b3e5f3318700c

    • SHA512

      634428c0e7dc62e7c44f60586c0ab0cedb8b55d9e7f2432f7f681aa58e0a8a444168d104d25c51b7839c06817f83f52a7baa4a0e45df6db283d6d5aa0d5e424e

    • SSDEEP

      384:x7/thyc+f7zLajrZhVoaOt2yyViz/vcvwkD:F/thyc+f7zyoaOt2yqiz/avD

    Score
    3/10
    execution
    behavioral25behavioral26

    • Target

      $PLUGINSDIR/LuaSocket/lua/socket/tp.lua

    • Size

      3KB

    • MD5

      2cad406e591cade482c7f16f39c21481

    • SHA1

      84a3ab88ff7a9102c2c6d21bdb6eede6862167a4

    • SHA256

      343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269

    • SHA512

      ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145

    Score
    3/10
    execution
    behavioral27behavioral28

    • Target

      $PLUGINSDIR/LuaSocket/mime/core.dll

    • Size

      52KB

    • MD5

      4a4845ba1666907f708c9c10a31ec227

    • SHA1

      1ebf626adc84147e5114885ce779f92d6eb68f3a

    • SHA256

      a1ffee9687ab4a23a78b3251888aff09e2896d76f8d16d713367b265f125188d

    • SHA512

      d009f5e2a2ecfbec5e5e788ade142d612846d0c99921774e4a11b060998dfb0680cf1e1a54604535d5560738093f9ae166866cb23eee5c7d9c4e5cc5a33e7464

    • SSDEEP

      768:Hk1jtHTV0IuugoXCodH5LjciB9snJ1hTgZNno42L:HkhtHTeroXR3aL0toV

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      $PLUGINSDIR/LuaSocket/socket/core.dll

    • Size

      80KB

    • MD5

      4bf7db111acfa7c28ad36606107b3322

    • SHA1

      6f20b9f6663ce0c309a2ce60e718d64ffb6c75b3

    • SHA256

      bfe8445c38ee71240e856f85d79e94123d7179bf43688de0e2a14e32e6ef21b0

    • SHA512

      0a5e66a65b80e15d8198f2934c58227ae17680f0fbea9865b2f44af82a29c53d4f95cf9616b4dfd75202420eb73b7d962cf2c84fdad6ce26afe1eb4bb978d0b6

    • SSDEEP

      768:4pOz0XSP1hSt5+5lKfZyDy3TygCk749NRAa1YwqJlfp8iB9jDEu/s5RPOothtlRp:wOws14t5CeTygmNRA0IVh05IoN3

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discoveryupx
Score
7/10

behavioral2

discoveryupx
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

execution
Score
3/10

behavioral14

execution
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10