Overview

overview

7

Static

static

3

021e189e87...18.exe

windows7-x64

7

021e189e87...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDIR/pwgen.dll

windows7-x64

3

$PLUGINSDIR/pwgen.dll

windows10-2004-x64

3

Launcher.exe

windows7-x64

3

Launcher.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    021e189e879e499709c7767ab12fc897_JaffaCakes118

  • Size

    536KB

  • Sample

    240930-s73xzatanp

  • MD5

    021e189e879e499709c7767ab12fc897

  • SHA1

    2c4809588be1e623f67a01ec66819b317b7c0373

  • SHA256

    611c20535b02d96d24541d9f571139a1e95209f8395df1d3f6cce3c7cd159097

  • SHA512

    0b4300442d8516f5a8cc7bf0302e35826b1144ba986e063b3885ddc3201872e3c7ad9f9d34b2558854caa7c6660b0d9b0d652528760a29cc2fe5c431313d2ae1

  • SSDEEP

    12288:UuopsWbcM3jd8yquvzR80o29dX8PEomqcQL/s4eC:UjSrgx6uvzR8bR6QLdH

Score
7/10
discovery

Malware Config

Targets

    • Target

      021e189e879e499709c7767ab12fc897_JaffaCakes118

    • Size

      536KB

    • MD5

      021e189e879e499709c7767ab12fc897

    • SHA1

      2c4809588be1e623f67a01ec66819b317b7c0373

    • SHA256

      611c20535b02d96d24541d9f571139a1e95209f8395df1d3f6cce3c7cd159097

    • SHA512

      0b4300442d8516f5a8cc7bf0302e35826b1144ba986e063b3885ddc3201872e3c7ad9f9d34b2558854caa7c6660b0d9b0d652528760a29cc2fe5c431313d2ae1

    • SSDEEP

      12288:UuopsWbcM3jd8yquvzR80o29dX8PEomqcQL/s4eC:UjSrgx6uvzR8bR6QLdH

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Banner.dll

    • Size

      4KB

    • MD5

      0116a50101c4107a138a588d1e46fca5

    • SHA1

      b781dce23e828cf2b97306661c7dad250a6aaf77

    • SHA256

      ab80cf45070d936f0745f5e39b22e6e07ba90aa179b5ec4469ef6e2cb1b9ef6b

    • SHA512

      55de6aeaad05b01a25828553d3ea9f1b32a8b0c35c42dc6106bed244320e3421ec6a6f5359b15f9d18dd1e9692ca5572b2736d9d48cceb07b9443601d00a5988

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/pwgen.dll

    • Size

      16KB

    • MD5

      a555472395178ac8c733d90928e05017

    • SHA1

      f44b192d66473f01a6540aaec4b6c9ac4c611d35

    • SHA256

      82ae08fced4a1f9a7df123634da5f4cb12af4593a006bef421a54739a2cbd44e

    • SHA512

      e6d87b030c45c655d93b2e76d7437ad900df5da2475dd2e6e28b6c872040491e80f540b00b6091d16bc8410bd58a1e82c62ee1b17193ef8500a153d4474bb80a

    • SSDEEP

      96:Rb32p/4mp563gfdaDf2GEFd69qI214YgU+dXXDtFCOdd7KPcC+pyTY62l2z252NJ:YCQAED61dpEEN5VifUbw2mDG0

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      Launcher.exe

    • Size

      105KB

    • MD5

      6d4f6dd0907656b54feae8e9b32cdc48

    • SHA1

      e16c7de28099cdbe249c687163cfaa43f4745164

    • SHA256

      922f5298a703b26cdf9ddec16bdcfbee91f8d01edf637bf1d55451e58450d02d

    • SHA512

      b2f2c2f622459f635fb55bb026c111a0327e85ea80aaa8178b22a6e39cb4f38eb1bbdca2792b29a7cb75e46e15366d8d8a6decc526bd86f4fa2566ab5fb16396

    • SSDEEP

      3072:TmE8YnODGgFu8W6vj9yUfpcmMVIdFqQbz4O:SjEONhW8QUfp3Q6qQbz

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks