Overview

overview

7

Static

static

3

00bd0152d1...18.exe

windows7-x64

7

00bd0152d1...18.exe

windows10-2004-x64

7

$EXEFILE.exe

windows7-x64

1

$EXEFILE.exe

windows10-2004-x64

1

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$TEMP/$EXEFILE.exe

windows7-x64

1

$TEMP/$EXEFILE.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00bd0152d1e82567167551532127d22c_JaffaCakes118

  • Size

    311KB

  • Sample

    240930-lyr1sayepm

  • MD5

    00bd0152d1e82567167551532127d22c

  • SHA1

    18608ef45607fd1a163c560d2e141913858176b1

  • SHA256

    c57e4b126d8c78f70bf20b3eaf5af1020736be3dfbf8ac81ceb471ae462a6b16

  • SHA512

    98fc206ff11b5f44d92e9739fe088c6bd6bb5642fb4d562ac83ca643989d34dfe2eae11ee13126fa27f4ddb3415b7b50be38efcb7769b485e83ccb46943a37a6

  • SSDEEP

    6144:j+K0zxl/aEZlr7uLT7Z+NIPYWe5WFxR24kp6PKoi1rU:Kz+2qvZnYQF3OA2e

Score
7/10
discovery

Malware Config

Targets

    • Target

      00bd0152d1e82567167551532127d22c_JaffaCakes118

    • Size

      311KB

    • MD5

      00bd0152d1e82567167551532127d22c

    • SHA1

      18608ef45607fd1a163c560d2e141913858176b1

    • SHA256

      c57e4b126d8c78f70bf20b3eaf5af1020736be3dfbf8ac81ceb471ae462a6b16

    • SHA512

      98fc206ff11b5f44d92e9739fe088c6bd6bb5642fb4d562ac83ca643989d34dfe2eae11ee13126fa27f4ddb3415b7b50be38efcb7769b485e83ccb46943a37a6

    • SSDEEP

      6144:j+K0zxl/aEZlr7uLT7Z+NIPYWe5WFxR24kp6PKoi1rU:Kz+2qvZnYQF3OA2e

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $EXEFILE

    • Size

      6KB

    • MD5

      30bfedc658f64ad26beeaf7f86f59195

    • SHA1

      c117d11c71b174dcbc4befa04d0189ef653a4fbb

    • SHA256

      4cc27e18b1a79e729ef3c3032257f3b1e4b5cb55ea34b9e548380b01493cc2c3

    • SHA512

      79f3ea5c465220d58e139d9829bd3f00faf4a39113e02b8e549f42496fb62263de4751063a085bf3d2962b15c72728309261f1faf3579e36e99198d7ecf536b6

    • SSDEEP

      96:H/xEAOhcoR5m76X/Rlo/u5LaXiVXLBOCPwveaxhdy+v8:fxUaOm76X/RS2syCCGHd1v8

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/Banner.dll

    • Size

      4KB

    • MD5

      fcca36e21ca7c4ecfc29f6804acbd76b

    • SHA1

      2f1972d5a0ec8377e043b9b304e62c24c6c38506

    • SHA256

      de59710bad95741c41e608f946d9eb4edacdf73ab92a1a3341f8a160b8952c66

    • SHA512

      1885aaf379e6547e519a65751d192beb9f078d63f056886cbcdae75f37f12bf8e89c98fa3c45aa60967e19ba51329a8384cf7a64d851ab10b648b17daf9b175e

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      cf85183b87314359488b850f9e97a698

    • SHA1

      6b6c790037eec7ebea4d05590359cb4473f19aea

    • SHA256

      3b6a5cb2a3c091814fce297c04fb677f72732fb21615102c62a195fdc2e7dfac

    • SHA512

      fe484b3fc89aeed3a6b71b90b90ea11a787697e56be3077154b6ddc2646850f6c38589ed422ff792e391638a80a778d33f22e891e76b5d65896c6fb4696a2c3b

    • SSDEEP

      96:3IsUxO9udx4qYp7AJb76BykUbQMtHUOA5Iv+RnsrqeXV+d1g2IW9t2c+cEwF9oug:YVL7ikJb76BQUoUm+RnyXVYO2RvHoug

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsisdl.dll

    • Size

      14KB

    • MD5

      1dadb63a5dfaa0679485c5dbaf96033f

    • SHA1

      d1717aab683c55bd13bbd520d2a91178efa0d676

    • SHA256

      72c65f7cd4a611b077b1ad0be8185780909e9cb04c53ecdac3e17fc72c99b245

    • SHA512

      46535c2d96937d49ee7c222428db4a8d61eb346efa0845fcd88e06523ed7836518e5a72d623e9c5563bf6759b449b6d2fcb0340b98a6e7966027bc983db4f722

    • SSDEEP

      384:wck76gi51kE5aYOMLDC4UnDp9B0Jc5HNw2PE:wck76gibLCMLDLCx04HNVPE

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $TEMP/$EXEFILE

    • Size

      6KB

    • MD5

      30bfedc658f64ad26beeaf7f86f59195

    • SHA1

      c117d11c71b174dcbc4befa04d0189ef653a4fbb

    • SHA256

      4cc27e18b1a79e729ef3c3032257f3b1e4b5cb55ea34b9e548380b01493cc2c3

    • SHA512

      79f3ea5c465220d58e139d9829bd3f00faf4a39113e02b8e549f42496fb62263de4751063a085bf3d2962b15c72728309261f1faf3579e36e99198d7ecf536b6

    • SSDEEP

      96:H/xEAOhcoR5m76X/Rlo/u5LaXiVXLBOCPwveaxhdy+v8:fxUaOm76X/RS2syCCGHd1v8

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks