Overview

overview

7

Static

static

3

0848252cc7...18.exe

windows7-x64

7

0848252cc7...18.exe

windows10-2004-x64

7

$PLUGINSDIR/i5.exe

windows7-x64

3

$PLUGINSDIR/i5.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0848252cc7f82c5620536d58b5a7128d_JaffaCakes118

  • Size

    277KB

  • Sample

    241002-b1spzs1bll

  • MD5

    0848252cc7f82c5620536d58b5a7128d

  • SHA1

    212df80e3594c83f68c0fdacf131d73f47d8fb0d

  • SHA256

    45994262d76d4923bfe89cfaf01d0657b53fc679ab7b69b2ee5d4f0025c3c6a2

  • SHA512

    fcf6790e32a0f0507e7a8c9e4de99f61a1f1c79fb2a78528dce3c27b2ce3ecbbe2965c3e26ee6ce560787dac9bacc65b5bf744e2a108eb7dacf58c63618af625

  • SSDEEP

    6144:UsaocyLCa3f8kSuns+VRQbF0c9qGrvrXx51McZytvx7DDeDBVl:UtobD3uYLYFLtvhCfefl

Score
7/10
discovery

Malware Config

Targets

    • Target

      0848252cc7f82c5620536d58b5a7128d_JaffaCakes118

    • Size

      277KB

    • MD5

      0848252cc7f82c5620536d58b5a7128d

    • SHA1

      212df80e3594c83f68c0fdacf131d73f47d8fb0d

    • SHA256

      45994262d76d4923bfe89cfaf01d0657b53fc679ab7b69b2ee5d4f0025c3c6a2

    • SHA512

      fcf6790e32a0f0507e7a8c9e4de99f61a1f1c79fb2a78528dce3c27b2ce3ecbbe2965c3e26ee6ce560787dac9bacc65b5bf744e2a108eb7dacf58c63618af625

    • SSDEEP

      6144:UsaocyLCa3f8kSuns+VRQbF0c9qGrvrXx51McZytvx7DDeDBVl:UtobD3uYLYFLtvhCfefl

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/i5.exe

    • Size

      214KB

    • MD5

      0b168b79397a1c3d5a181787e27ea323

    • SHA1

      1867e953755169de011fd12009c2f42f300a9d47

    • SHA256

      c681e32d308452ee7c24eeebb335ee86cfe42783db2289ef2caa0d0671b53d5a

    • SHA512

      3b3e2ff7ad58a677cfbd22dec0c294e0b27ec0b81e8e6e20f45ac228c90472318ec0bec15d6689180b73061b94ea750049688ee5ed95a4e1d205eb94e7d0a250

    • SSDEEP

      3072:GMU6VA1iNIsQ9JmIIdK/t6FxHySzWB4Q6ENVZ7WiU9ENogFs5rqKl4WAv8/e29X2:GMggI3Jmu/t6FsnluqKe8m2s2KHW

    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks