Overview

overview

6

Static

static

5

fe481182fe...18.exe

windows7-x64

5

fe481182fe...18.exe

windows10-2004-x64

5

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...sk.dll

windows7-x64

3

$PLUGINSDI...sk.dll

windows10-2004-x64

3

Update/jpborder.exe

windows7-x64

Update/jpborder.exe

windows10-2004-x64

jpdesk.exe

windows7-x64

6

jpdesk.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe481182fe5b1a0ccbed83db72a16348_JaffaCakes118

  • Size

    1.6MB

  • Sample

    240929-lxbmeasckg

  • MD5

    fe481182fe5b1a0ccbed83db72a16348

  • SHA1

    4e8cf62b8b5dca72bab068c1ac7046bfa6af0421

  • SHA256

    57ae086c54afb21a1b31e112b49b3cc237e2c129366f18648fb243100688aee2

  • SHA512

    e94c370408f0a6ba39ac97e78ffa0ef03501f89e3ff3ab621f4f8a70a61840d8d9536c5a4769377548f7556138c192ea02b55148d283cd4c2b918c58d338ca73

  • SSDEEP

    49152:Jw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFa4bsRiJqKD11HwZ5sRrbJ3p:J9qM1Hn3ZHcWnJ

Score
6/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      fe481182fe5b1a0ccbed83db72a16348_JaffaCakes118

    • Size

      1.6MB

    • MD5

      fe481182fe5b1a0ccbed83db72a16348

    • SHA1

      4e8cf62b8b5dca72bab068c1ac7046bfa6af0421

    • SHA256

      57ae086c54afb21a1b31e112b49b3cc237e2c129366f18648fb243100688aee2

    • SHA512

      e94c370408f0a6ba39ac97e78ffa0ef03501f89e3ff3ab621f4f8a70a61840d8d9536c5a4769377548f7556138c192ea02b55148d283cd4c2b918c58d338ca73

    • SSDEEP

      49152:Jw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFa4bsRiJqKD11HwZ5sRrbJ3p:J9qM1Hn3ZHcWnJ

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsWebJPDesk.dll

    • Size

      303KB

    • MD5

      064c5337ed2c6f123f5270d7dcec2a40

    • SHA1

      51efbdc6f795510b84f6c0e3b9796f8720a55983

    • SHA256

      e73b9d938fcccf600d3fa743965b7190f376c830091b05f828b052d1f439d389

    • SHA512

      5c840dfcc346ddc1a4de2ada1ea311cf1ab049866ce9bcf02c9d20422a92f521e35413323d818393ba0b452499c394eadc39a94200afd35cd6fb1e143e11bd7f

    • SSDEEP

      3072:Y5gYOFiiBz0yPYx2yXk+5OqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5A:dFDBYyo2yXOqdKcS0Hwjl2JwK

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      Update/jpborder.exe

    • Size

      591KB

    • MD5

      fdce37018a2483856328e0cf28ddf519

    • SHA1

      584177ef48d73c67ad29123496b3194911e5a0df

    • SHA256

      5886f65aea79940021b6f2058ed1b25413ef9e0a622a1ba8d23e032825f56bb0

    • SHA512

      a5bdde3575ba81f062673d022d9c1e39b25230d7afc4be40686f1dbd2f3fba1086079ff3ebdddda237cbeb81f64b1d95f9e43ccd9b4ac6dd1851346b7b2adc0e

    • SSDEEP

      12288:221BH+uQMNqcWnbzEQs534nn3TQG0+ClAVaDwIspv51SDDFpZh5zKxoEY6:2QBjNebzEQsIjN0/psFSFpZ3La

    Score
    1/10
    behavioral11behavioral12

    • Target

      jpdesk.exe

    • Size

      903KB

    • MD5

      62acbd2883956a26821d5f602fbe4ebb

    • SHA1

      c906c459a0136a4eb8777a9c1aef49c2adbf700f

    • SHA256

      4e436e97d7aa73e1c82cb32c25964d71ca8f4c2aac701783215334948e795328

    • SHA512

      8e386323b7d35f9955a4cb604abe9cff3df83a7ddad40e57fbaa3acac9ef0e2bd3bcaec0518e0a59cde420ad8a6d0b1e9432b095c2ebe26d531c2807d964a32a

    • SSDEEP

      24576:hoAXT+u1NglW1ScKc1FnXJJl/+KhI97Nimo6rmfa6z/AH44J:hH6uGW1SUSNw6rmfa6/4J

    Score
    6/10
    discoverypersistenceupx

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks