Overview

overview

7

Static

static

3

faf699044e...18.exe

windows7-x64

7

faf699044e...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...tg.dll

windows7-x64

3

$PLUGINSDI...tg.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    faf699044eac43f8d29acf3a125bd296_JaffaCakes118

  • Size

    649KB

  • Sample

    240927-1pq5fs1fjk

  • MD5

    faf699044eac43f8d29acf3a125bd296

  • SHA1

    6ba32b74c40db738be19813852284dd4d9aec4b5

  • SHA256

    16bc4c3a1ff7518fa4130f71f5ff3d0b833a4f991565e02131b0159315a5c7db

  • SHA512

    99db6dce19e341bc54e652d7b333d1168aaa84df2bc6422d80829ef9844328bbcf55cfbe2624f8d6ee41f78fee00b3671a707de74ac0ed0a26a4f4901ed25aa9

  • SSDEEP

    12288:XQHIEo3lrPlCAR2o0C5+7RRM4s8SwE88TzxGXSirBscfc8vy4hff:XQo71kART0x45P88TNGZ486Gf

Score
7/10
discovery

Malware Config

Targets

    • Target

      faf699044eac43f8d29acf3a125bd296_JaffaCakes118

    • Size

      649KB

    • MD5

      faf699044eac43f8d29acf3a125bd296

    • SHA1

      6ba32b74c40db738be19813852284dd4d9aec4b5

    • SHA256

      16bc4c3a1ff7518fa4130f71f5ff3d0b833a4f991565e02131b0159315a5c7db

    • SHA512

      99db6dce19e341bc54e652d7b333d1168aaa84df2bc6422d80829ef9844328bbcf55cfbe2624f8d6ee41f78fee00b3671a707de74ac0ed0a26a4f4901ed25aa9

    • SSDEEP

      12288:XQHIEo3lrPlCAR2o0C5+7RRM4s8SwE88TzxGXSirBscfc8vy4hff:XQo71kART0x45P88TNGZ486Gf

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ZipDLL.dll

    • Size

      163KB

    • MD5

      2dc35ddcabcb2b24919b9afae4ec3091

    • SHA1

      9eeed33c3abc656353a7ebd1c66af38cccadd939

    • SHA256

      6bbeb39747f1526752980d4dbec2fe2c7347f3cc983a79c92561b92fe472e7a1

    • SHA512

      0ccac336924f684da1f73db2dd230a0c932c5b4115ae1fa0e708b9db5e39d2a07dc54dac8d95881a42069cbb2c2886e880cdad715deda83c0de38757a0f6a901

    • SSDEEP

      3072:8CkSJJ30k1pn2T4ISnUGN+E8KnCOxA17jxLmRtWHyPDQFllOdJiSg:tkSJy+c30UxbKnA1hLKWSVdk

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/lylkftg.dll

    • Size

      170KB

    • MD5

      c3d75c8a2eae564067ddd28e3ec641d0

    • SHA1

      33ba3b39709bbe1c2445e8d7d3052f6f3555480a

    • SHA256

      79fb77e61c357cff698a4e5dc6f156923934107af2cd40a9ba9fbef7379dadb6

    • SHA512

      47d4bc9509f909b7b11108c3e8636a641c1c74a23d40f69fda829ee14e3f5a45886e24bdbb4acf37ef07f7516daeae5b59a31101fb99741c37a4ced56cbd94e3

    • SSDEEP

      3072:GhHrx5gOoG6gEOTdlTZxn9oHC81+kwG9z/ac8:Ir84Z2H/2G4c8

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks