Overview

overview

5

Static

static

5

0849ba5787...18.exe

windows7-x64

5

0849ba5787...18.exe

windows10-2004-x64

5

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...sk.dll

windows7-x64

3

$PLUGINSDI...sk.dll

windows10-2004-x64

3

jpdesk.exe

windows7-x64

5

jpdesk.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0849ba578782f8883ca0264815976b6b_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241002-b2mkcs1bqp

  • MD5

    0849ba578782f8883ca0264815976b6b

  • SHA1

    8ad85a58c398dae75288b381dabaee4b73abef7c

  • SHA256

    b615ab29ee9c0a886419ad35a93b6978f5e7a8781eee6b23f6fe85afef2b7b23

  • SHA512

    99dd6982fef63592a74c9a4c6b92477d43b07430c1bd68d94d84ae6add5730cfb60c85eb5fad43acdb355766a44db08d9eec0dc010d9db493eddc32fe74516be

  • SSDEEP

    24576:Gw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFrpzH1b192rUzKu1D0PFZUp+:Gw1dILPAX8ln6aB4WP3E29V8S4Dhg0fx

Score
5/10
discoveryupx

Malware Config

Targets

    • Target

      0849ba578782f8883ca0264815976b6b_JaffaCakes118

    • Size

      1.1MB

    • MD5

      0849ba578782f8883ca0264815976b6b

    • SHA1

      8ad85a58c398dae75288b381dabaee4b73abef7c

    • SHA256

      b615ab29ee9c0a886419ad35a93b6978f5e7a8781eee6b23f6fe85afef2b7b23

    • SHA512

      99dd6982fef63592a74c9a4c6b92477d43b07430c1bd68d94d84ae6add5730cfb60c85eb5fad43acdb355766a44db08d9eec0dc010d9db493eddc32fe74516be

    • SSDEEP

      24576:Gw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFrpzH1b192rUzKu1D0PFZUp+:Gw1dILPAX8ln6aB4WP3E29V8S4Dhg0fx

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsWebJPDesk.dll

    • Size

      300KB

    • MD5

      d7945b9e9ec6598060ef3b9f93be3f02

    • SHA1

      b36a25ad5a631c77050b908c261c1cafb28f0b06

    • SHA256

      b13a84dfb4a801a89a97f3eab6edeb3a47cbb5fa6d104503ce714a9f20ed69f9

    • SHA512

      de0af351675c702f9db825b69bc8bd4ddcb9ac5e61deca98e0acdc7b7ec32b6d7a751dff1969816d9ad3efafc818641b679089f25d81d56120d3e603a0b6d0f9

    • SSDEEP

      3072:3L2pPD6npPU86KtvrySRqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5:3LEPDWphtTRqdKcS0Hwjl2Jw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      jpdesk.exe.tmp

    • Size

      863KB

    • MD5

      e0e4ac96b16ac97f8e3484f183ff64d0

    • SHA1

      bf68bb607e7d35244f667406fe8dd31e9b70da18

    • SHA256

      256fde28b3f149a55662b4918c3940c9990f2c3ae4e886db19cda5110d0cdec6

    • SHA512

      2094e930cc54c58b975af3d30ea6fb70e3fd7bda0efa73070d2ffd2eda4c5178800180ed7c178b6aad62917aee08eab130ace9986c526586bbd0905aa204e852

    • SSDEEP

      24576:UWfAdzvIfVSx0e1rttTCxPkz0v3CozT+03nIgIvk4Q+:UbvIfVSWe1htuPkqbu03nIgIvk4N

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks