Overview

overview

7

Static

static

5

12c1b32bf6...18.exe

windows7-x64

7

12c1b32bf6...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ur.dll

windows7-x64

3

$PLUGINSDI...ur.dll

windows10-2004-x64

3

uninst.exe

windows7-x64

uninst.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    12c1b32bf60719d1ae4d4e6a92e1a3f7_JaffaCakes118

  • Size

    51KB

  • Sample

    241004-lcmh6swejp

  • MD5

    12c1b32bf60719d1ae4d4e6a92e1a3f7

  • SHA1

    f71966795eea8895861633dff35451a2c3723fc8

  • SHA256

    df5a9479c573b050707c2a22d50f962b92906d325ea7b9be934551aeb2cc8c0e

  • SHA512

    c6c5760627eccafec1e7fdb0c52467a887cccc9402659a9ec753a1c9a9fea2b4d3ead6ec871bf6d6ed884a53eca9ac6863a359e3238536ccabf9973e797867d3

  • SSDEEP

    1536:YtVRpxjnaaGKsUlMvcHiU8XVEXY2e1wBYFVewK:YvnBaaWbMiU8rnCwK

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      12c1b32bf60719d1ae4d4e6a92e1a3f7_JaffaCakes118

    • Size

      51KB

    • MD5

      12c1b32bf60719d1ae4d4e6a92e1a3f7

    • SHA1

      f71966795eea8895861633dff35451a2c3723fc8

    • SHA256

      df5a9479c573b050707c2a22d50f962b92906d325ea7b9be934551aeb2cc8c0e

    • SHA512

      c6c5760627eccafec1e7fdb0c52467a887cccc9402659a9ec753a1c9a9fea2b4d3ead6ec871bf6d6ed884a53eca9ac6863a359e3238536ccabf9973e797867d3

    • SSDEEP

      1536:YtVRpxjnaaGKsUlMvcHiU8XVEXY2e1wBYFVewK:YvnBaaWbMiU8rnCwK

    Score
    7/10
    discoveryupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      444e1109d960c307df0ca2b33a24731b

    • SHA1

      55e3b57d06128911ed4af44858d199d9b1945edc

    • SHA256

      b3ba181120cd5b57e2cd5435bbd64c3257f7525ade359f89554e93f466692125

    • SHA512

      9efdb45ee0eae73c24d3f01ff799160090f2b1f0f28ee8da3af52992fec220bf905070ce5a6cc1b5657642440ad29c22bc6889cd3ee1f674a908a935dcf4c2a8

    • SSDEEP

      384:fKlm7i+c3QW6ckPhyDEaLny2bbBBIXwZ:Cqi8BcyhEhLfbbTI

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/isecur.dll

    • Size

      20KB

    • MD5

      aeb6056b1df231c33f33dcde0bbf7206

    • SHA1

      217083a5117b563fbcaa9f001213f814a439a94d

    • SHA256

      f29020c3ca30d259be9f0d298e1209de7c5b21ad6ee55e22898ddaf3827de08d

    • SHA512

      1ac298198494cf98b767d792432c9d85f7eb3fb343022b83f5d5f42f0c6f5e71d0c311caba42443b7de6a48ff5b15e06440e27db5bd3d691bda8b3a8001f4381

    • SSDEEP

      384:m2t5Mw0kLgmOAWO9a+g03xMuWSVIfQXJKjOS11vWqHj8PvLz6J+vt6:m8MdY9xg03xMuWS+ft1JHj8PTz6J+16

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      uninst.exe

    • Size

      25KB

    • MD5

      1fa0b902733e4bd02d4df3e5f8a88e2c

    • SHA1

      ee5b6aa728ec9e3bc77f3ad98b497f64bb98e2f9

    • SHA256

      f22b5fc284941a8be258378c57ae1a1c89e52f871ccb0f29c2ec18ee8c888376

    • SHA512

      75139436ad94520e7d44b29e3116d3ad79f0ba3946236794066ca3d8fec853b81193ef5393e764858a0c02e3bb0b7adbc6bd8d7c5d871a5e6ace602c341a6934

    • SSDEEP

      768:T2d/1YcVRHJxjnaDOGKiFdWEgzyyyUyyyyyiMvc5+9a3:YtVRpxjnaaGKsUlMvcEa3

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks