Overview

overview

7

Static

static

7

da8b59aedf...18.exe

windows7-x64

7

da8b59aedf...18.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...sk.dll

windows7-x64

3

$PLUGINSDI...sk.dll

windows10-2004-x64

3

Desklets/C...ar.exe

windows7-x64

7

Desklets/C...ar.exe

windows10-2004-x64

7

jpdesk.exe

windows7-x64

7

jpdesk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    da8b59aedf7f080b3a1260a404f494d9_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240911-rsnn3avgpk

  • MD5

    da8b59aedf7f080b3a1260a404f494d9

  • SHA1

    4a3720798f63cd7fd058ccdd792248b5e8cd4ae5

  • SHA256

    405347914fa300acf39308b4ad656f0b8cc6ff24312d59de16aec74a50f1ee91

  • SHA512

    7b9bf9c87da67472215611170faa30f395d609d2d68f457e46a85a3e53086a27401a4c00369a4f2200e27931f1d880567264059159f2677aa3cb43771cdbe2c6

  • SSDEEP

    49152:Dw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqF8JSoZWk5RTSfofXzHeNbV+K:D+lZWGGfQD+NWYgj+X7qSqc5JKM

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      da8b59aedf7f080b3a1260a404f494d9_JaffaCakes118

    • Size

      1.8MB

    • MD5

      da8b59aedf7f080b3a1260a404f494d9

    • SHA1

      4a3720798f63cd7fd058ccdd792248b5e8cd4ae5

    • SHA256

      405347914fa300acf39308b4ad656f0b8cc6ff24312d59de16aec74a50f1ee91

    • SHA512

      7b9bf9c87da67472215611170faa30f395d609d2d68f457e46a85a3e53086a27401a4c00369a4f2200e27931f1d880567264059159f2677aa3cb43771cdbe2c6

    • SSDEEP

      49152:Dw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqF8JSoZWk5RTSfofXzHeNbV+K:D+lZWGGfQD+NWYgj+X7qSqc5JKM

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsWebJPDesk.dll

    • Size

      300KB

    • MD5

      d7945b9e9ec6598060ef3b9f93be3f02

    • SHA1

      b36a25ad5a631c77050b908c261c1cafb28f0b06

    • SHA256

      b13a84dfb4a801a89a97f3eab6edeb3a47cbb5fa6d104503ce714a9f20ed69f9

    • SHA512

      de0af351675c702f9db825b69bc8bd4ddcb9ac5e61deca98e0acdc7b7ec32b6d7a751dff1969816d9ad3efafc818641b679089f25d81d56120d3e603a0b6d0f9

    • SSDEEP

      3072:3L2pPD6npPU86KtvrySRqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5:3LEPDWphtTRqdKcS0Hwjl2Jw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      Desklets/Calendar/Calendar.exe

    • Size

      366KB

    • MD5

      0e64a2f8b4d0a8003fa553d3d709e048

    • SHA1

      a57162fd69c2801322b9212b8b085baf3cd79e18

    • SHA256

      02ec350c5baae3da4dd3eea685c250bcf7cadce61ff7cc5a4c53d292134d18cb

    • SHA512

      79800698a5e7bad400821a536e3a7f85a9034450104d8c810c216495ee3c25b6961d13b0608a9f047b949fb7af11fb0cedba6e16858f1f4f0d3e18f20f4f3dc4

    • SSDEEP

      6144:3GOyiXIyVqSI33pwATsoNJ3P3t+w0OJ2zwppPHsubEpbAydKJ:3AxyxI3ZwAbJ3F+OK0subEpddI

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

    • Target

      jpdesk.exe.tmp

    • Size

      851KB

    • MD5

      390d0b24025393b6d19e788ecc14e374

    • SHA1

      2b6705fd35d751a5e24d092903dbd6de53d13a42

    • SHA256

      b3852f3b5fe203166b4e1cc8399788b28a6de122e1cdc2bca106865902e77422

    • SHA512

      f531c53b2aa0fe368cad4fb2dbe44b8e07d7e4d0e0f186d2edc4c606547d33b4009f211565d16d46f65650cf6d5d82f3a8c8aad1c747dc0dd5b822dcbccfbd3e

    • SSDEEP

      12288:csA0imoBqk2BnzlGkVFOdNAg7jWoGem4wbNok6rsxDK2TfptuUgjYD/Ug4JrkE6k:4qx5zpeEgPweaZJxuOgjYTUg4xkuJi41

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks