Overview

overview

7

Static

static

3

00b05442c4...18.exe

windows7-x64

7

00b05442c4...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.exe

windows7-x64

3

$PLUGINSDI...er.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    00b05442c4342b14cbdaaf5a9c698400_JaffaCakes118

  • Size

    276KB

  • Sample

    240930-lqm2vsybmj

  • MD5

    00b05442c4342b14cbdaaf5a9c698400

  • SHA1

    b8cf2bfdd8b4bb2d65254ed13b413f18a24621a9

  • SHA256

    63e7b27fee363184aefb8a9d71ce0bb97db39358083506cab33ff716a09d9013

  • SHA512

    072a853d73dfd67cb5f634efbcb26f211e34eb504cd5096c1e7f57ad304bf64482428ffccfc0e3c64458ce2edb2cc2f7432f59bf5464cebb0a883e0139edeb35

  • SSDEEP

    6144:asaocyLCvcZGmQMvURTaC+VNd8+if0LEdBP5LO33YfrjF7YG02T:atobImQMsR+C+VNd8+Tw3RS38jF702T

Score
7/10
discovery

Malware Config

Targets

    • Target

      00b05442c4342b14cbdaaf5a9c698400_JaffaCakes118

    • Size

      276KB

    • MD5

      00b05442c4342b14cbdaaf5a9c698400

    • SHA1

      b8cf2bfdd8b4bb2d65254ed13b413f18a24621a9

    • SHA256

      63e7b27fee363184aefb8a9d71ce0bb97db39358083506cab33ff716a09d9013

    • SHA512

      072a853d73dfd67cb5f634efbcb26f211e34eb504cd5096c1e7f57ad304bf64482428ffccfc0e3c64458ce2edb2cc2f7432f59bf5464cebb0a883e0139edeb35

    • SSDEEP

      6144:asaocyLCvcZGmQMvURTaC+VNd8+if0LEdBP5LO33YfrjF7YG02T:atobImQMsR+C+VNd8+Tw3RS38jF702T

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/installer.exe

    • Size

      214KB

    • MD5

      7cf3bce5ecf2aea97b49e2eba8ca0aba

    • SHA1

      543f5fc23df08f946488d27b2fb16b13b6311d1a

    • SHA256

      7358afae03a24b31c0d82ee4e5fd2f17cafe6c3bdd8e26326aa4118f2169f736

    • SHA512

      5f9184189940af27e25ae2988db8d15923dac81b2410c5fe3287f126fb50df43735fccb4e4d9f376e9f24700604c157aa1828622dab54014d9583a56ab698d8d

    • SSDEEP

      6144:GQyZPNKiygF7R/7qMVtxQEtS6wIZyaNof:GQWPkbGlCEtS6wwFo

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks