Overview

overview

7

Static

static

3

dedcfda209...18.exe

windows7-x64

7

dedcfda209...18.exe

windows10-2004-x64

7

$0/scanbasic.dll

windows7-x64

1

$0/scanbasic.dll

windows10-2004-x64

1

$0/scanbasic.exe

windows7-x64

1

$0/scanbasic.exe

windows10-2004-x64

3

$0/uninstall.exe

windows7-x64

7

$0/uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dedcfda209d44545a011c4dbbb1407be_JaffaCakes118

  • Size

    995KB

  • Sample

    240913-zgqchsxfpj

  • MD5

    dedcfda209d44545a011c4dbbb1407be

  • SHA1

    fe15482c28ba0ab2084753cf6c5df4c5efa78857

  • SHA256

    8f0b9feeeb9a0e97a4ef42c19b33355532e1e8eb485eef53b3b148de8d056ad0

  • SHA512

    c8ec5c9bd009ef9fb2a91049315e97d632f1a59355217f9c9d46f83d42deadf362b63abc93c2e8adef23601de3d92ecc640c6e86ef6cec18cca660f2cd7cc20f

  • SSDEEP

    24576:pk7RrqR+xpJUHw/+fIYvDzULvqoxCDKLsk9OapPu2pjNackYb9l:w2RYWfIID4vqmmO9OapPhxa6hl

Score
7/10
discovery

Malware Config

Targets

    • Target

      dedcfda209d44545a011c4dbbb1407be_JaffaCakes118

    • Size

      995KB

    • MD5

      dedcfda209d44545a011c4dbbb1407be

    • SHA1

      fe15482c28ba0ab2084753cf6c5df4c5efa78857

    • SHA256

      8f0b9feeeb9a0e97a4ef42c19b33355532e1e8eb485eef53b3b148de8d056ad0

    • SHA512

      c8ec5c9bd009ef9fb2a91049315e97d632f1a59355217f9c9d46f83d42deadf362b63abc93c2e8adef23601de3d92ecc640c6e86ef6cec18cca660f2cd7cc20f

    • SSDEEP

      24576:pk7RrqR+xpJUHw/+fIYvDzULvqoxCDKLsk9OapPu2pjNackYb9l:w2RYWfIID4vqmmO9OapPhxa6hl

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $0/scanbasic.dll

    • Size

      864KB

    • MD5

      00e037a441c6d1fa9e83b940b45722fd

    • SHA1

      bc74e25ebbb2e3b875687a01adfd54e9848feca3

    • SHA256

      e4ab5e7c24a047030342cf04721fe1ac0ba23fcff54a7f0c21d9260860919929

    • SHA512

      9b859db1d56d9183057dc3462f5f0ecc11532c97f0e15758ef6aaf712bbce8ba136802ecec145924853bb1e66d2fcd31045de2449490ce9d5ad27c7303fffb0c

    • SSDEEP

      24576:T/0Wx3PktRnsfJLXzLcxPbXgAfWvvNgtR2YcIXXxG1ivIt/HxA:L0l4JYgAfsNPYc/1bt/i

    Score
    1/10
    behavioral3behavioral4

    • Target

      $0/scanbasic.exe

    • Size

      25KB

    • MD5

      b42bcc39d53855619e211c31ca14b9a1

    • SHA1

      2da9bf7031d1fcc13cb29564c915071a3a2afcf0

    • SHA256

      5f4587ece40bb6f0b53856411e586343c615f4136a892f3afd33b9a92e1310e7

    • SHA512

      2dae62ef9604aff1b64a839e9262b61207607a8eb9aa64ad51553dd96c1db5508ef987887e9191ab26bfd35f90718ab6fde0ad8eab790f35df30d930d675f575

    • SSDEEP

      384:QqjBJPX0aIWoZd/Xv1yN33s0WRR8bJaVMqLjyVX4T7uhKN75MlU3Ykv0mlv:5H0zWoZ9K1BdaiqLJT7uhKZ5S2VBlv

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $0/uninstall.exe

    • Size

      78KB

    • MD5

      436ef4ad876e13dfccec1cecb74df55e

    • SHA1

      b7f6f97c8771b9c3f4ef5c2dc6f563294dd4111e

    • SHA256

      3219b4bf60982481f893501a83c78947f975ec8efa0a3b2df09e0e709d8d76a8

    • SHA512

      6970e90f1b726293b1a0a5821dca81ce75fea064996fa5a250b3917c1881197835beccfd3ec12481039b6471b75d1f9b43bd7bd37e908fd8c13b73d7501df630

    • SSDEEP

      1536:PEkjY1zy214Qay0DGkJ7qAELVigJPcp8QXTEF6D9d2/Dv:8kjAJ4dDGkJ+AI03SYwUDO/z

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral7behavioral8

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      13KB

    • MD5

      d765c492c21689e3d9d61634371fd861

    • SHA1

      ac200933671ae52c9d5544d0e2e8e9144d286c83

    • SHA256

      551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc

    • SHA512

      9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f

    • SSDEEP

      192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      fe24766ba314f620d57d0cf7339103c0

    • SHA1

      8641545f03f03ff07485d6ec4d7b41cbb898c269

    • SHA256

      802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd

    • SHA512

      60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3

    • SSDEEP

      192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB

    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks