Overview

overview

7

Static

static

3

cfe3f8d7c5...18.exe

windows7-x64

7

cfe3f8d7c5...18.exe

windows10-2004-x64

7

$PLUGINSDI...yt.dll

windows7-x64

3

$PLUGINSDI...yt.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfe3f8d7c5ea48a32aa1f078d50a045a_JaffaCakes118

  • Size

    695KB

  • Sample

    240906-s86p9avfph

  • MD5

    cfe3f8d7c5ea48a32aa1f078d50a045a

  • SHA1

    94d4c581d584763e71181520977ccbadc8b986df

  • SHA256

    2309210f2738a199758633ad4f83895083c78b42660bfa5a2e9979f263556d70

  • SHA512

    61324e819b7c37f326e03eba0a14f4da5b1f9d2aeafd153af6ce583f7066336d8317f9760743df7589edd693d3fb571700c97f0bbd37ff676186ae6427f6e6ac

  • SSDEEP

    12288:Z5DHkHVp/ROGY4ZWqHKgvIsfvFqSAmvPtl+T8iYMZN9NbMeYA3wbIrICxd1y:Z5culmKgvn5AmvjoHN9NbMeBDa

Score
7/10
discovery

Malware Config

Targets

    • Target

      cfe3f8d7c5ea48a32aa1f078d50a045a_JaffaCakes118

    • Size

      695KB

    • MD5

      cfe3f8d7c5ea48a32aa1f078d50a045a

    • SHA1

      94d4c581d584763e71181520977ccbadc8b986df

    • SHA256

      2309210f2738a199758633ad4f83895083c78b42660bfa5a2e9979f263556d70

    • SHA512

      61324e819b7c37f326e03eba0a14f4da5b1f9d2aeafd153af6ce583f7066336d8317f9760743df7589edd693d3fb571700c97f0bbd37ff676186ae6427f6e6ac

    • SSDEEP

      12288:Z5DHkHVp/ROGY4ZWqHKgvIsfvFqSAmvPtl+T8iYMZN9NbMeYA3wbIrICxd1y:Z5culmKgvn5AmvjoHN9NbMeBDa

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/jtbtjyt.dll

    • Size

      158KB

    • MD5

      50717a3c230f7e5d92695291df9541c1

    • SHA1

      5fca1d6d65bff01d9bb8ac82f0fb696dcfa51b4b

    • SHA256

      c96ed31b77fd2f24435c2b3c9aa65b46fe05070660d6ee053bc03a8c5e547d71

    • SHA512

      8e8fbcdd400ece291021a5bcbf50b693f3e122e28930539577035fabe5ad2f1ee1965349208bb17a9015c42210c3d1a20fbdc7c10f922eb213bbfbf716d9218f

    • SSDEEP

      3072:MIIm67adCMGlNPm61Fu5xL22+Lw5H8QD2iWNz:MICDl9mVxa2IPhiWN

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks