Overview

overview

7

Static

static

3

d0152335b8...18.exe

windows7-x64

7

d0152335b8...18.exe

windows10-2004-x64

7

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...IP.dll

windows7-x64

3

$PLUGINSDI...IP.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0152335b8a9b870e7186b4915d29dcd_JaffaCakes118

  • Size

    363KB

  • Sample

    240906-v4qjkszbrc

  • MD5

    d0152335b8a9b870e7186b4915d29dcd

  • SHA1

    90d4b56aa9e245cf0f4ddbaf5d734447268e7f45

  • SHA256

    221ae4bf4c96eadd0853a377fe2747b83401264223f265d925167a687f7afbcf

  • SHA512

    c20e7503a04be5af15f5f24a3f900762ac8842469b2951ffede0c7167beca74e10644a66691d9a9a154092bfbe2eee1979ce08232caeff04379d8a5813c79a21

  • SSDEEP

    6144:IQqX9fNj4FfyhQU3jIDMppZ9VcbLie/AeNH9uzhRXp7eFTNQFF8kvlQxH:A9N0uQU3iKPe4EH9uFQTCmUQB

Score
7/10
discovery

Malware Config

Targets

    • Target

      d0152335b8a9b870e7186b4915d29dcd_JaffaCakes118

    • Size

      363KB

    • MD5

      d0152335b8a9b870e7186b4915d29dcd

    • SHA1

      90d4b56aa9e245cf0f4ddbaf5d734447268e7f45

    • SHA256

      221ae4bf4c96eadd0853a377fe2747b83401264223f265d925167a687f7afbcf

    • SHA512

      c20e7503a04be5af15f5f24a3f900762ac8842469b2951ffede0c7167beca74e10644a66691d9a9a154092bfbe2eee1979ce08232caeff04379d8a5813c79a21

    • SSDEEP

      6144:IQqX9fNj4FfyhQU3jIDMppZ9VcbLie/AeNH9uzhRXp7eFTNQFF8kvlQxH:A9N0uQU3iKPe4EH9uFQTCmUQB

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/DcryptDll.dll

    • Size

      14KB

    • MD5

      904beebec2790ee2ca0c90fc448ac7e0

    • SHA1

      40fabf1eb0a3b7168351c4514c5288216cb1566d

    • SHA256

      f730d9385bf72eac5d579bcf1f7e4330f1d239ca1054d4ead48e9e363d9f4222

    • SHA512

      8bdbbaaf73e396cf9fd9866b3e824b7e70c59a2bdefdb3236387e60d0e645d011265fe79fb193f6c0d6abe2e9c01260720c71cd8f068fcc4624760511c54efaa

    • SSDEEP

      192:apY9VuCnNCbs8dNyHdrvr5T1KEtx/9ehuhiDTUkSv/DxRyeHk51I7n13Xm:aptMNUjyVvGWxauhiDDS3DnyK7nF

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      acc2b699edfea5bf5aae45aba3a41e96

    • SHA1

      d2accf4d494e43ceb2cff69abe4dd17147d29cc2

    • SHA256

      168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

    • SHA512

      e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

    • SSDEEP

      96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsP7ZIP.dll

    • Size

      95KB

    • MD5

      63d1fdac90da45c39b752671bc298e2c

    • SHA1

      62d31cc63912a945e345d3ecd7145b09a74c0ff6

    • SHA256

      6a921cfd66e7ed299c4c97499c9441d57c5b5f1328fa7ef09a11e95d92036710

    • SHA512

      b4be365fbfa43e3970b875ade297c2820d1867bff5e3d3d36f91cc25f41a5e5040ca4057e319830fb5808fc2f9f42a2b7fcef8007ac668e9cf62a98a38891b86

    • SSDEEP

      1536:7GNJRkAd/emuECWZhoYSEIIIlLlKqLOA5bG:GIO/RubMoYSdGqLF5bG

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks