Overview

overview

7

Static

static

3

df71085c25...18.exe

windows7-x64

7

df71085c25...18.exe

windows10-2004-x64

7

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$TEMP/frac....0.exe

windows7-x64

7

$TEMP/frac....0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df71085c253075b7ec9474348d576427_JaffaCakes118

  • Size

    599KB

  • Sample

    240914-ef2zpsvhlr

  • MD5

    df71085c253075b7ec9474348d576427

  • SHA1

    cd8824a2ad94939ef74bc22f3a2d9b727ff48879

  • SHA256

    cfbce9cdb3fb56d180a939250fe3dd410c3c9fa9143345d5fc9e2f326450bbb8

  • SHA512

    f52968904e767557589529eceb254c9e15974e96f3e1cf498e2434155a592dc0083c30c9313ebc28ed02d791441ec240d5bd4d19bd330df121099a346b0c26db

  • SSDEEP

    12288:JFu9j+SzSbK4I4P12bgWwrYAa/qVZsvsAXdMghiG:JFu9j+XI4P1SgWwrYjCUvsq+vG

Score
7/10
discovery

Malware Config

Targets

    • Target

      df71085c253075b7ec9474348d576427_JaffaCakes118

    • Size

      599KB

    • MD5

      df71085c253075b7ec9474348d576427

    • SHA1

      cd8824a2ad94939ef74bc22f3a2d9b727ff48879

    • SHA256

      cfbce9cdb3fb56d180a939250fe3dd410c3c9fa9143345d5fc9e2f326450bbb8

    • SHA512

      f52968904e767557589529eceb254c9e15974e96f3e1cf498e2434155a592dc0083c30c9313ebc28ed02d791441ec240d5bd4d19bd330df121099a346b0c26db

    • SSDEEP

      12288:JFu9j+SzSbK4I4P12bgWwrYAa/qVZsvsAXdMghiG:JFu9j+XI4P1SgWwrYjCUvsq+vG

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      72KB

    • MD5

      1611656f80b78236069906365be36264

    • SHA1

      064f7a679d484459db3b1768a1b8a898ae788883

    • SHA256

      721454186b5a04a5755adcc0b6ad1ea71b0a464d69b5a97529b36e44f6087d3b

    • SHA512

      625a6fef59c720afd1c5e5dc91dd549b91dd8d9c7802bebf391687234c4845848a5644e5b16c1b358cd6a43a67a9443f0e080d04c0688c64ec38ac06beeb4328

    • SSDEEP

      1536:iq1go754oPtqTbIrKZYexTTvIUQt85rFmTwHoUgyB:iqh14oPtjp6vIUQt85rboUgyB

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $TEMP/fractal-mandala-screensaver-3.0.exe

    • Size

      548KB

    • MD5

      257c2a2010e5212f1c1ab2ce0302b5f2

    • SHA1

      6c1adcb7ec096a587e1fbe6032ec59fa1ea6f11f

    • SHA256

      7124b33faadf6ddf9d21d24bb360ee5bf30fb85888abb4404b9c64fd713cf5ed

    • SHA512

      c7c4cc95c277b3f1144250f988972a0f9c4bfb542c5ab3d0cadcf03fab810dfdd9db08399db002e89f849b796b9ccb38e6d745db9f68c6b5da0ffd62378da059

    • SSDEEP

      12288:FapniPtyRYbi4I4Q1GbgfwrL1zsl5dnkTvspXZMghe:wpniARII4Q1Cgfwr5Ixnsvsdyf

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks