Overview

overview

7

Static

static

3

0eedf643a9...18.exe

windows7-x64

7

0eedf643a9...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDIR/xml.dll

windows7-x64

3

$PLUGINSDIR/xml.dll

windows10-2004-x64

3

StartupMgr.exe

windows7-x64

3

StartupMgr.exe

windows10-2004-x64

3

mscomctl.dll

windows7-x64

3

mscomctl.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0eedf643a912cc403b5e9ee76e498972_JaffaCakes118

  • Size

    602KB

  • Sample

    241003-lalh4ayhlg

  • MD5

    0eedf643a912cc403b5e9ee76e498972

  • SHA1

    10bdca3d415bc044d2670b309277509d66a2f68c

  • SHA256

    f754e16f34c6e8d71349e3dc4110c0e46aeffecff2663f14545504576ec3773d

  • SHA512

    b85a678de410b70fdfa9b54b51dd139b314de750e1d5778c674049fe9b42566061d8c612460c3b2ac5cbb6e8447c154e4d23f9deac003c84d23c1bd515eb6f17

  • SSDEEP

    12288:do6w251SzBFxC3Y0Bt0a58YjUShVrs7KNU2G5uNK0l79RafKWlOntFFsH9bRqG:doH2zMYjBaaZVs7i5NK0If/lxRd

Score
7/10
discovery

Malware Config

Targets

    • Target

      0eedf643a912cc403b5e9ee76e498972_JaffaCakes118

    • Size

      602KB

    • MD5

      0eedf643a912cc403b5e9ee76e498972

    • SHA1

      10bdca3d415bc044d2670b309277509d66a2f68c

    • SHA256

      f754e16f34c6e8d71349e3dc4110c0e46aeffecff2663f14545504576ec3773d

    • SHA512

      b85a678de410b70fdfa9b54b51dd139b314de750e1d5778c674049fe9b42566061d8c612460c3b2ac5cbb6e8447c154e4d23f9deac003c84d23c1bd515eb6f17

    • SSDEEP

      12288:do6w251SzBFxC3Y0Bt0a58YjUShVrs7KNU2G5uNK0l79RafKWlOntFFsH9bRqG:doH2zMYjBaaZVs7i5NK0If/lxRd

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/blowfish.dll

    • Size

      22KB

    • MD5

      5afd4a9b7e69e7c6e312b2ce4040394a

    • SHA1

      fbd07adb3f02f866dc3a327a86b0f319d4a94502

    • SHA256

      053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae

    • SHA512

      f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511

    • SSDEEP

      384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/locate.dll

    • Size

      17KB

    • MD5

      7d3317f57c1a368480ace3c0ca804eeb

    • SHA1

      d4c7e185bc64aac82339f51ba6c21cf0713c9f1a

    • SHA256

      d88a04c1e39db583eaad727fd390fe599ab10198ee040bfbdd22daefadbd2372

    • SHA512

      5598c2e6caa2f66edd48f8c8305e054d4b0740b5f2b7ed92cf197a13ac66ba99a32013d34b3c2e28d007ab7979eb90a50681324eb736b1410e7df1902e4ec32a

    • SSDEEP

      384:ev/vPBkA6dK8wiLe45naPji7hpx2kRV+qgm:evyvwiNnGji7Xxjc8

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/xml.dll

    • Size

      118KB

    • MD5

      42df1fbaa87567adf2b4050805a1a545

    • SHA1

      b892a6efbb39b7144248e0c0d79e53da474a9373

    • SHA256

      e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845

    • SHA512

      4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d

    • SSDEEP

      1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      StartupMgr.exe

    • Size

      56KB

    • MD5

      e26559c7190840c30866fe8c5cd25c9f

    • SHA1

      1fe6b7bbed6f6ed00cb7e2f657498fdff63d713d

    • SHA256

      5c39399b7128cdd8bbcbb4f0aaf1612caf08af78d0793ac65c94e92809e8385d

    • SHA512

      befe14cb3101bc2f0b56315371660944d99c4d8c1e2179c21d7ebf2fe8cbd66ac6e104d862dbe29e9d1269d060f70676c7181e92a5bba583f99e3386c491ed00

    • SSDEEP

      768:UmF9oaXoKM/pWhasJySv2OAL1N0gT8rYDY0LRjzUH05VinCBQfjYMd:UmF9oQMBwJyS5ALPdDLBSN

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      mscomctl.ocx

    • Size

      1.0MB

    • MD5

      d268668751ee22997d7ef1417034cb04

    • SHA1

      d8a87438ab0df47fe252b06162a986399cafffe1

    • SHA256

      fac6736251d3c61ecbd63be0420d1c75d5cd0442181d479013330155ca37d358

    • SHA512

      75f40cc8c92e3fcdd381669f6aa0bf1e76ee6fec0c5cbf53ea0bbfbff199ac7229fc1405f737420badd24f438b49b8d2eed2bb0f3fad0bf8a974f54bd6964a34

    • SSDEEP

      24576:TcqSrNXsCxx927qRC33KjjnZRqPnFqRo7w3zgyZdt+:TCXjx/2G9cv77EnM

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      uninst.exe

    • Size

      39KB

    • MD5

      9222eacef524865cabf377d4c801e7e9

    • SHA1

      8f220d0dac4ec10f434c6c7d770e5f9cbc55eaf0

    • SHA256

      8905a3d3ec106ff523b7a15f855feb8004873c9a3006ad1c9385e28995f8c63a

    • SHA512

      4f9dd4bbefb0b50aae8a16a37d77992b122d5c5988291d0d32d4583cf38fca9768d73177117d7cab61eec66ec5307b8a754ef8f697eeffb645aa8ef3b4e1d4ee

    • SSDEEP

      768:De3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJaddV8aZys:C3cpyORJLuB4P4AJJ0z8Ls

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks