Overview

overview

7

Static

static

3

ea7beb0fbc...18.exe

windows7-x64

7

ea7beb0fbc...18.exe

windows10-2004-x64

7

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

$PLUGINSDI...x.html

windows7-x64

3

$PLUGINSDI...x.html

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...ui.dll

windows7-x64

3

$PLUGINSDI...ui.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea7beb0fbc9ce99b69ae2d450d2efd7e_JaffaCakes118

  • Size

    526KB

  • Sample

    240919-ds3akaycnl

  • MD5

    ea7beb0fbc9ce99b69ae2d450d2efd7e

  • SHA1

    11824f8eee9845a434134bf9b03363de761460a6

  • SHA256

    73454dbb6806c488d74ce3b621dcca5616a67725276e4230896a670d44a8af5b

  • SHA512

    5902b0778cfdcb18d6509c76cbd1867e755d0a54766eeae92845b21344243de54651f1534e64a8e4d7291073ae3a2b8c45babd5c6d937e041720e4640677764c

  • SSDEEP

    12288:xp/15tWJvzR9qHTyM6dn7bGIbtgiwkiT2hrX7C7Inp6gwCXXAw/44:T15tCz7qHTgdn7XbKiwH2lX7qInp6ghf

Score
7/10
discovery

Malware Config

Targets

    • Target

      ea7beb0fbc9ce99b69ae2d450d2efd7e_JaffaCakes118

    • Size

      526KB

    • MD5

      ea7beb0fbc9ce99b69ae2d450d2efd7e

    • SHA1

      11824f8eee9845a434134bf9b03363de761460a6

    • SHA256

      73454dbb6806c488d74ce3b621dcca5616a67725276e4230896a670d44a8af5b

    • SHA512

      5902b0778cfdcb18d6509c76cbd1867e755d0a54766eeae92845b21344243de54651f1534e64a8e4d7291073ae3a2b8c45babd5c6d937e041720e4640677764c

    • SSDEEP

      12288:xp/15tWJvzR9qHTyM6dn7bGIbtgiwkiT2hrX7C7Inp6gwCXXAw/44:T15tCz7qHTgdn7XbKiwH2lX7qInp6ghf

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InetLoadEx.dll

    • Size

      55KB

    • MD5

      9fae574b1004bb0650eebba3d8040c59

    • SHA1

      541583ec14af05915b8efefe520edd4f25914c9a

    • SHA256

      73f4a1529acf2ea56d4db9ed8134bed0498cea38903105f7c2af8cc7d11b8db3

    • SHA512

      ab25c429301f2d8a2da6b7c2a222c4028ad8e393c67dde83606762a8ba49c6c49460538624a799969dd0b3c810623d7e471c65a390e8661228a621580d7d54c7

    • SSDEEP

      768:WFKaQrcF+ntygjX/+qEg469TRphsguCtPQpcQaa5jZ19K:WIaQrs0kgjx9TRsg1ox5H

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/OfferBox.html

    • Size

      3KB

    • MD5

      286cf3f4acd57498ad2d9a4f2165c346

    • SHA1

      a4cdfc22e90fe0fba737394c5d482d5447058416

    • SHA256

      a9c0e6fdec9ece6b3072071524ae96acc88ae7a2dbfcd331c5c32c9df02f2662

    • SHA512

      9fdb5bc9f971d5ebcb5d90fba9e9557d9cbd1c0a99bdd9cf5e5e278fb4357b243281b25359c8d6ac50dcc43843009a8fbf661c9c232ca7ddb158144a1c678e17

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Processes.dll

    • Size

      35KB

    • MD5

      2cfba79d485cf441c646dd40d82490fc

    • SHA1

      83e51ac1115a50986ed456bd18729653018b9619

    • SHA256

      86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7

    • SHA512

      cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043

    • SSDEEP

      768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/Progress.dll

    • Size

      80KB

    • MD5

      15e01578481287bbcf32d2217f1b5246

    • SHA1

      67a7d05bb2f8b33980867d3352280fa0cd0b4e9f

    • SHA256

      61d8f9eba68cc6e2a83ec6d1689b2aa45e06bc32e13cdfcec8b593a14bc8bf70

    • SHA512

      9a83832faf20eaef5043f69d468bfe032d790274df25bae73bce4f7830ac83587d7e23dba531bff04951cbed67399386d9ea4337002a99d8cf61de3f8e33b674

    • SSDEEP

      768:WCFSITRx/imU5IBAczjPj+NbHHFJUzWwrhABjknWgiLLhfv09jaYhdb5P8mDnbK:+8xzUKBZo0zWWhskjiLwR/5P3b

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/blowfish.dll

    • Size

      60KB

    • MD5

      926e4475c00fb5254c32c876921b77d0

    • SHA1

      8a55bc8b6e49021a4abbd441783c41d5e019798b

    • SHA256

      d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8

    • SHA512

      53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8

    • SSDEEP

      768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/nswebgui.dll

    • Size

      157KB

    • MD5

      afbd534002a046624eb68a59c836e77b

    • SHA1

      68d3ff7fb3d9918f0b81a1be4d9d284b378b35e5

    • SHA256

      712d1e92905692a7efb1550979b905aa8402d4b4aeeb264a4aee6c6f3307ee1c

    • SHA512

      fde37949fb11b3d8b9f068d17a9236a88625263bc383c5f84efeec05aaee9230674e8d99541337b2b0fe670bd2b275c772f65305720a5c005e62e49cfe225ec4

    • SSDEEP

      3072:4PvJ2NuxuVLjhu+k+1p91lTImHvZ5NHqmf:4XJwV/4N+tTTJHR

    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks