Overview

overview

3

Static

static

3

dc09bfdb8d...18.exe

windows7-x64

3

dc09bfdb8d...18.exe

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

7za.exe

windows7-x64

3

7za.exe

windows10-2004-x64

3

aria2c.exe

windows7-x64

1

aria2c.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc09bfdb8ddba6231ccd124de1170c51_JaffaCakes118

  • Size

    2.4MB

  • Sample

    240912-hxkcrsxckm

  • MD5

    dc09bfdb8ddba6231ccd124de1170c51

  • SHA1

    a014937ca6f4a1502d6ed45cb2b67a92f3690477

  • SHA256

    e968b86963ee5777e87ac5de6542632d151e8f723da98f45a149a88754e46b37

  • SHA512

    1f823202b06d486412eb5c7ed07f4601b850c9aa5b4bab62ab672bd2356a0257fd4a84f2eb0ee9cf19185f6dca586f90787bb1af08625b21765fd3191b9ea9fa

  • SSDEEP

    49152:fzZ2RjPZc/c0WnCNzCrIUpnBL7kSCNxMreWviNg2jEMnOUKrPevk:LZKZAc0JNrUrOrKX6Rnxs

Score
3/10
discovery

Malware Config

Targets

    • Target

      dc09bfdb8ddba6231ccd124de1170c51_JaffaCakes118

    • Size

      2.4MB

    • MD5

      dc09bfdb8ddba6231ccd124de1170c51

    • SHA1

      a014937ca6f4a1502d6ed45cb2b67a92f3690477

    • SHA256

      e968b86963ee5777e87ac5de6542632d151e8f723da98f45a149a88754e46b37

    • SHA512

      1f823202b06d486412eb5c7ed07f4601b850c9aa5b4bab62ab672bd2356a0257fd4a84f2eb0ee9cf19185f6dca586f90787bb1af08625b21765fd3191b9ea9fa

    • SSDEEP

      49152:fzZ2RjPZc/c0WnCNzCrIUpnBL7kSCNxMreWviNg2jEMnOUKrPevk:LZKZAc0JNrUrOrKX6Rnxs

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      8cf2ac271d7679b1d68eefc1ae0c5618

    • SHA1

      7cc1caaa747ee16dc894a600a4256f64fa65a9b8

    • SHA256

      6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba

    • SHA512

      ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3

    • SSDEEP

      192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      7KB

    • MD5

      f27689c513e7d12c7c974d5f8ef710d6

    • SHA1

      e305f2a2898d765a64c82c449dfb528665b4a892

    • SHA256

      1f18f4126124b0551f3dbcd0fec7f34026f930ca509f04435657cedc32ae8c47

    • SHA512

      734e9f3989ee47a86bee16838df7a09353c7fe085a09d77e70d281b21c5477b0b061616e72e8ac8fcb3dda1df0d5152f54dcc4c5a77f90fbf0f857557bf02fbc

    • SSDEEP

      96:JpmkmwmHDPVhklfSoRPB+YSvWvZckH69MSz00vQFHhAVvSGYuHnUNy2DCP:J+PVhYfSokvW2CsQFBAVaGdHnUNR

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      7za.exe

    • Size

      574KB

    • MD5

      42badc1d2f03a8b1e4875740d3d49336

    • SHA1

      cee178da1fb05f99af7a3547093122893bd1eb46

    • SHA256

      c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf

    • SHA512

      6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c

    • SSDEEP

      12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      aria2c.exe

    • Size

      5.8MB

    • MD5

      0f07ee6b525234a5365f958fec42f596

    • SHA1

      d376095155df048a1f65ccb133bc83637e9fac95

    • SHA256

      9a13ae99997055a28462f4b84662ab13fd48e8fcea1cb41bac44f0c9d2d4fb74

    • SHA512

      5491913578013cd954fdf47d63ba7d5be1f1cb05398f015ba467bf9afe546a504c0ae1e2ab3ab19798dc3544f9157a0f95ba9dd707dae7c6a208dbd96d4973c5

    • SSDEEP

      98304:aBm/djQTRxXLwQEtw/RSPWZAvKYg78i5H89Am1UE0VdqR62NXYknXo3EXRChONmq:aBm1jQDnMqRZAvKYg78UH89Am1UEgdqr

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks