Overview

overview

7

Static

static

3

dc1bb33c47...18.exe

windows7-x64

7

dc1bb33c47...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...iz.dll

windows7-x64

3

$PLUGINSDI...iz.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc1bb33c47f1bc011918fe425317c8d7_JaffaCakes118

  • Size

    708KB

  • Sample

    240912-j3b41syhmb

  • MD5

    dc1bb33c47f1bc011918fe425317c8d7

  • SHA1

    f3c1a91f9c5027814fecc6fc0783fef2dbe13bc5

  • SHA256

    2333bf085b9b641fd8a37faf26869ed6e96d4594b25d5715658ac26f54035a56

  • SHA512

    70d7d63dce588cd264aa3a98fba0b55d82354f9b86d873bdf917346b39264b539b376a37a56b96a3d3f6b3522db2f072941ee05b74be53c053237d390215cc5c

  • SSDEEP

    12288:7iTX0pTYSMtR7ZSiJf1McX/lQN2Xh1Agt4SiMzkuUAjAD7qmEDNWvAmfc8vy4hlF:7iTEpTYxthZSIf+cX/lQN2CSZzXJEDCu

Score
7/10
discovery

Malware Config

Targets

    • Target

      dc1bb33c47f1bc011918fe425317c8d7_JaffaCakes118

    • Size

      708KB

    • MD5

      dc1bb33c47f1bc011918fe425317c8d7

    • SHA1

      f3c1a91f9c5027814fecc6fc0783fef2dbe13bc5

    • SHA256

      2333bf085b9b641fd8a37faf26869ed6e96d4594b25d5715658ac26f54035a56

    • SHA512

      70d7d63dce588cd264aa3a98fba0b55d82354f9b86d873bdf917346b39264b539b376a37a56b96a3d3f6b3522db2f072941ee05b74be53c053237d390215cc5c

    • SSDEEP

      12288:7iTX0pTYSMtR7ZSiJf1McX/lQN2Xh1Agt4SiMzkuUAjAD7qmEDNWvAmfc8vy4hlF:7iTEpTYxthZSIf+cX/lQN2CSZzXJEDCu

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ZipDLL.dll

    • Size

      163KB

    • MD5

      2dc35ddcabcb2b24919b9afae4ec3091

    • SHA1

      9eeed33c3abc656353a7ebd1c66af38cccadd939

    • SHA256

      6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1

    • SHA512

      0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901

    • SSDEEP

      3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/czifqiz.dll

    • Size

      161KB

    • MD5

      fe65cdd18d4c567b6a3c12214c55f4e7

    • SHA1

      5312c385a6267b17ae7c314e1fd8863ed94a6744

    • SHA256

      e189e3ef2008c32f528f2d6a7c463f6e8de238ad0e550dadde580515f5a56063

    • SHA512

      bc826255605c6ec151b36222e5b2c0e1bd06e224e9342e984050f8681cb1ab624f58d86acee424195c1a369e912234eeec2bc9ad4bf04ce815dc4e973023dd76

    • SSDEEP

      3072:GFTZSxgOf6M8CvGLKBdz+tVdQbwJOZJcO:qcjfvGLKHdy8Jc

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks