Overview

overview

7

Static

static

3

f6c086d88c...18.exe

windows7-x64

7

f6c086d88c...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$_5_/plugi...ei.dll

windows7-x64

3

$_5_/plugi...ei.dll

windows10-2004-x64

3

bibibei.dll

windows7-x64

3

bibibei.dll

windows10-2004-x64

3

ж.exe

windows7-x64

3

ж.exe

windows10-2004-x64

3

ȱ�...վ.url

windows7-x64

1

ȱ�...վ.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6c086d88c778b689af75d986917ad80_JaffaCakes118

  • Size

    148KB

  • Sample

    240925-ymxhcaxgnf

  • MD5

    f6c086d88c778b689af75d986917ad80

  • SHA1

    394c222b7fedb0713548948508c5e7743e97cc55

  • SHA256

    5489c20cfb45e05cfcadf3ab5c8dba296d8e58f10994eae07535e5c1d4b43c2e

  • SHA512

    5323afab533df52604a870ccbd674fc20c22aa235d196099cf03d8255a3ba2c6cf9104a9fec71cd0229cca085a4d0b29a2832044f6cb43fb7414c3fb66ec20e1

  • SSDEEP

    3072:yLk395hYXJbjdn/1tMEd4UCkwKKnTwNnDWXmE10C1g2o4f:yQqJd/1tM25FDKT62yk

Score
7/10
discovery

Malware Config

Targets

    • Target

      f6c086d88c778b689af75d986917ad80_JaffaCakes118

    • Size

      148KB

    • MD5

      f6c086d88c778b689af75d986917ad80

    • SHA1

      394c222b7fedb0713548948508c5e7743e97cc55

    • SHA256

      5489c20cfb45e05cfcadf3ab5c8dba296d8e58f10994eae07535e5c1d4b43c2e

    • SHA512

      5323afab533df52604a870ccbd674fc20c22aa235d196099cf03d8255a3ba2c6cf9104a9fec71cd0229cca085a4d0b29a2832044f6cb43fb7414c3fb66ec20e1

    • SSDEEP

      3072:yLk395hYXJbjdn/1tMEd4UCkwKKnTwNnDWXmE10C1g2o4f:yQqJd/1tM25FDKT62yk

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $_5_/plugin/bibibei/bibibei.dll

    • Size

      85KB

    • MD5

      88cc539a4fa419f3a075583630666537

    • SHA1

      ad39ca64809a2d63c5273f2b1686334a2d23faa1

    • SHA256

      f0bbe70471679fef5a8487359aa2305772cb56598e63d5c31cd6a809453d887b

    • SHA512

      642b41f0fc3b45255e3970da5d876fb0050340df2f658edafa52a9a639d8f6cc4c538a2c7cf2d4b14f449431c4f12f98012a0fddaeca788643cd1470f9992a22

    • SSDEEP

      1536:avxUHaMMdoRpaEi3kKmMl2qQJzOLOWn+WUQG/QJgR4I:avxUHa5Ia/kKadcLOWn+ZQ/I

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      bibibei.dll

    • Size

      85KB

    • MD5

      88cc539a4fa419f3a075583630666537

    • SHA1

      ad39ca64809a2d63c5273f2b1686334a2d23faa1

    • SHA256

      f0bbe70471679fef5a8487359aa2305772cb56598e63d5c31cd6a809453d887b

    • SHA512

      642b41f0fc3b45255e3970da5d876fb0050340df2f658edafa52a9a639d8f6cc4c538a2c7cf2d4b14f449431c4f12f98012a0fddaeca788643cd1470f9992a22

    • SSDEEP

      1536:avxUHaMMdoRpaEi3kKmMl2qQJzOLOWn+WUQG/QJgR4I:avxUHa5Ia/kKadcLOWn+ZQ/I

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      ж.exe

    • Size

      62KB

    • MD5

      55d0b00c652ceb5693294b07ec5ecb3c

    • SHA1

      af3171a0c7d86c748d375dee05f82e42859a2458

    • SHA256

      91c2d52885602c865979e54bea35ea2ae9e83f8543f811059de6867beec76db5

    • SHA512

      3e265a2ca4e0cdfb6e775e4c0d858d4a32b27cdcb7b3ffff634a4e99c741725b04d7d64a37888bd2c80225617a9bc9e899f62d54e5b89abdc808b6ad9ded5d8d

    • SSDEEP

      768:x4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJDT5+D4DLDdn/m7L7shG:KLXB65939tY6HBg4sXJQD4DLDdn/I

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      ȱ¹ٷվ.url

    • Size

      139B

    • MD5

      7c059e4c09016556287ee868719cbc4f

    • SHA1

      e28f992485fe8a61a6833340d18cb23c0e85b347

    • SHA256

      b2f95d76d49b32db08c201f125a6e073b1f4b39c627d8e00f250ce9a1fe7dd41

    • SHA512

      a2057ae6e8867b71f4ffc2a04df4341441bc8a3e1d83adca26dfcbcb96fe6ea0b0a3b2d1bc5e5029de0a45be9959e06786ef2219152f8238e45528713b0bc5f2

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks