Overview

overview

7

Static

static

3

d071d855f0...18.exe

windows7-x64

7

d071d855f0...18.exe

windows10-2004-x64

7

$PLUGINSDI...ti.dll

windows7-x64

3

$PLUGINSDI...ti.dll

windows10-2004-x64

3

$PLUGINSDI...nz.dll

windows7-x64

3

$PLUGINSDI...nz.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d071d855f0f8e26bb6d16c6101ce7fa7_JaffaCakes118

  • Size

    581KB

  • Sample

    240906-ztjeqsxhmh

  • MD5

    d071d855f0f8e26bb6d16c6101ce7fa7

  • SHA1

    86bbc666b2b047e9e2fd493f7ea56d5d56b8bfc5

  • SHA256

    16ecc7ea4a79ed0030236e94d44f5e54d21294bcaa06b8b0321114c9d8fc3c1e

  • SHA512

    7b0a2962e2a715f47d6b139e47e515aef6e9e2dc2705a6d91864b73e5d48a8762a9f8ebfa68e97db013250c22c31ac4f016eb6c7234858a00d6f030ddd5bbfc7

  • SSDEEP

    12288:CQDJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+qF:CqJbl+36tKPdhJ7Z

Score
7/10
discovery

Malware Config

Targets

    • Target

      d071d855f0f8e26bb6d16c6101ce7fa7_JaffaCakes118

    • Size

      581KB

    • MD5

      d071d855f0f8e26bb6d16c6101ce7fa7

    • SHA1

      86bbc666b2b047e9e2fd493f7ea56d5d56b8bfc5

    • SHA256

      16ecc7ea4a79ed0030236e94d44f5e54d21294bcaa06b8b0321114c9d8fc3c1e

    • SHA512

      7b0a2962e2a715f47d6b139e47e515aef6e9e2dc2705a6d91864b73e5d48a8762a9f8ebfa68e97db013250c22c31ac4f016eb6c7234858a00d6f030ddd5bbfc7

    • SSDEEP

      12288:CQDJhNH8ZkXWykEr8369tNFMP8NdHXpZ2achJC4+qF:CqJbl+36tKPdhJ7Z

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/cgibuti.dll

    • Size

      153KB

    • MD5

      9b081b4f84974a46cffcf1ef1a2e85f9

    • SHA1

      70a1b83bad19d28195f2df22c3d213a04b42fb2b

    • SHA256

      303f74df9812b639b66f919804039d1e295ffae8e543fa4349507110ac766752

    • SHA512

      4539a458b1d2ba61ffcf71ea59addd13727d26606f73dbfb21053d68d5656010dae5791d486789c14653c6fb953a7dc284c3a80db2b1970a0e7f0778ab77dbbf

    • SSDEEP

      3072:G+HP0gEeGhEuaa6sjnWhIn4t52ELJ+PG/vsXO4HQi:j0gEL+Rt52ESGN4HQi

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsisunz.dll

    • Size

      40KB

    • MD5

      5f13dbc378792f23e598079fc1e4422b

    • SHA1

      5813c05802f15930aa860b8363af2b58426c8adf

    • SHA256

      6e87ecb7f62039fbb6e7676422d1a5e75a32b90dde6865dcb68ee658ba8df61d

    • SHA512

      9270635a5294482f49e0292e26d45dd103b85fe27dc163d44531b095c5f9dbde6b904adaf1a888ba3c112a094380394713c796f5195b2566a20f00b42b6578e5

    • SSDEEP

      384:KExN66Yf2xL5Q4IsjuUjUZfqRDpImexpf88FwHxXvjX3hwlHt6oIfESxSHoOO8n9:O2x64GcVpI3xC8ynToIf1SIOhW4

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks