Overview

overview

7

Static

static

3

0843e5fa02...18.exe

windows7-x64

7

0843e5fa02...18.exe

windows10-2004-x64

7

$PLUGINSDI...ig.dll

windows7-x64

3

$PLUGINSDI...ig.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...fo.dll

windows7-x64

3

$PLUGINSDI...fo.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDIR/nsWeb.dll

windows7-x64

3

$PLUGINSDIR/nsWeb.dll

windows10-2004-x64

3

$PLUGINSDI...ry.dll

windows7-x64

3

$PLUGINSDI...ry.dll

windows10-2004-x64

3

av.vbs

windows7-x64

1

av.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0843e5fa028f288b352774242e62fa20_JaffaCakes118

  • Size

    203KB

  • Sample

    241002-bx71hazhrj

  • MD5

    0843e5fa028f288b352774242e62fa20

  • SHA1

    1386076c25438215c6ab12542d0d3aa731e4125f

  • SHA256

    0ab36dc2ffc4580bcff850c5dcca9df6673d89afc231f9b1e297096d80e8dc0a

  • SHA512

    3b62e1dd4572d4d97f2703f99f46b7cfa25e48e52971772d00615c9c3285ec4fb8ba5cec2a669edaede1116147278abd40f431f4c068b4e62cd27b26304c3906

  • SSDEEP

    3072:KgXdZt9P6D3XJpQvh/UkIHzgmjXMU7Q2pzFmaO7y+z3IAwpF5Z2+A:Ke34Ep/4H8mu2ppmaaEPE

Score
7/10
discovery

Malware Config

Targets

    • Target

      0843e5fa028f288b352774242e62fa20_JaffaCakes118

    • Size

      203KB

    • MD5

      0843e5fa028f288b352774242e62fa20

    • SHA1

      1386076c25438215c6ab12542d0d3aa731e4125f

    • SHA256

      0ab36dc2ffc4580bcff850c5dcca9df6673d89afc231f9b1e297096d80e8dc0a

    • SHA512

      3b62e1dd4572d4d97f2703f99f46b7cfa25e48e52971772d00615c9c3285ec4fb8ba5cec2a669edaede1116147278abd40f431f4c068b4e62cd27b26304c3906

    • SSDEEP

      3072:KgXdZt9P6D3XJpQvh/UkIHzgmjXMU7Q2pzFmaO7y+z3IAwpF5Z2+A:Ke34Ep/4H8mu2ppmaaEPE

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/IpConfig.dll

    • Size

      114KB

    • MD5

      a3ed6f7ea493b9644125d494fbf9a1e6

    • SHA1

      ebeee67fb0b5b3302c69f47c5e7fca62e1a809d8

    • SHA256

      ec0f85f8a9d6b77081ba0103f967ef6705b547bf27bcd866d77ac909d21a1e08

    • SHA512

      7099e1bc78ba5727661aa49f75523126563a5ebccdff10cabf868ce5335821118384825f037fbf1408c416c0212aa702a5974bc54d1b63c9d0bcade140f9aae1

    • SSDEEP

      1536:CPDzpyvLtmY7SeAmhPzV8+i7kRuACUxHf91MionF9JTwrLPG5zfO+lP7:UZl1e7L4ARzC3dwrLPG5zG+lP7

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/UserInfo.dll

    • Size

      4KB

    • MD5

      7579ade7ae1747a31960a228ce02e666

    • SHA1

      8ec8571a296737e819dcf86353a43fcf8ec63351

    • SHA256

      564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5

    • SHA512

      a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      e541458cfe66ef95ffbea40eaaa07289

    • SHA1

      caec1233f841ee72004231a3027b13cdeb13274c

    • SHA256

      3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420

    • SHA512

      0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c

    • SSDEEP

      384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      acc2b699edfea5bf5aae45aba3a41e96

    • SHA1

      d2accf4d494e43ceb2cff69abe4dd17147d29cc2

    • SHA256

      168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

    • SHA512

      e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

    • SSDEEP

      96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/nsWeb.dll

    • Size

      11KB

    • MD5

      12f7a0063463f269b816176e1a54447e

    • SHA1

      e9963b6e0237ceb9d7a8fe6c73d8196068a59dae

    • SHA256

      d72bf4fd8cbbdb61653c5e9da946d1c42e4daf2b1060da814ef0599a65a65c9c

    • SHA512

      03ed4495c682537a72a3379243a95199dac4bcb72d8c8e96d6d088cf7a3c208b654fc50065c6a4650703ec8e20b6d24fb2bc038b4f33a2fd700efc8e4c4d1900

    • SSDEEP

      192:01TZkc+G4r1JSWi58aaVfXbJAs1cDhqsb5D468V3OzJ:ktkc+Xr3SZ58xYlk058le

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/registry.dll

    • Size

      24KB

    • MD5

      2b7007ed0262ca02ef69d8990815cbeb

    • SHA1

      2eabe4f755213666dbbbde024a5235ddde02b47f

    • SHA256

      0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d

    • SHA512

      aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca

    • SSDEEP

      384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      av.vbs

    • Size

      567B

    • MD5

      a00fdb5ca818a76a95a75a57b55e889f

    • SHA1

      ae517559e6bf86d5439c9b3d4449857a96bf211f

    • SHA256

      d8018fd3a4b338bd5dcd54f71034c9ba11cf72fd45c0210786ced5d164750462

    • SHA512

      f1f052f8c4a5a4f97648dffc4db1675fd5575445d355e9095b9cbb47424156e4cb5eb0b011d9b5b1d3037f4631aad58c7e96951a13b0b55a833c44f70d3d031c

    Score
    1/10
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks