Overview

overview

7

Static

static

3

1352b90866...18.exe

windows7-x64

7

1352b90866...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.exe

windows7-x64

1

$PLUGINSDI...er.exe

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1352b908664abe3bd728d5f39380a327_JaffaCakes118

  • Size

    196KB

  • Sample

    241004-pen2katbnr

  • MD5

    1352b908664abe3bd728d5f39380a327

  • SHA1

    d19bafd56b825b23d696294ee366bd345742fbc7

  • SHA256

    051206d6ca043f44ba9c3116170997dd262f584d84eeafb53d16eb5513496adc

  • SHA512

    3c7b92523dcb5c7ee6e0007919f80f1d63943e47bbb5890a561a36eb0367f2a8af707ccc917d023de96d07e247b92e544bf5524e76ce0e40d7aaa9d52e02ce1d

  • SSDEEP

    6144:BsaocyLCs+DJaW5TGfUZAA+zqsOoxN7lQZ:BtobeDNRAAqPD2

Score
7/10
discovery

Malware Config

Targets

    • Target

      1352b908664abe3bd728d5f39380a327_JaffaCakes118

    • Size

      196KB

    • MD5

      1352b908664abe3bd728d5f39380a327

    • SHA1

      d19bafd56b825b23d696294ee366bd345742fbc7

    • SHA256

      051206d6ca043f44ba9c3116170997dd262f584d84eeafb53d16eb5513496adc

    • SHA512

      3c7b92523dcb5c7ee6e0007919f80f1d63943e47bbb5890a561a36eb0367f2a8af707ccc917d023de96d07e247b92e544bf5524e76ce0e40d7aaa9d52e02ce1d

    • SSDEEP

      6144:BsaocyLCs+DJaW5TGfUZAA+zqsOoxN7lQZ:BtobeDNRAAqPD2

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/installer.exe

    • Size

      139KB

    • MD5

      a088de90ae05c330b193cd98294774dd

    • SHA1

      e835eca9de7f91e19ee2f953e406a50be1bfe244

    • SHA256

      bb7a673ef42f5546f76ef0186f9cd60f0b420c360efbf2d9f15c95a7fa9b2862

    • SHA512

      fe76e39756536d84d75072d7524494f545bfe7524ba6f63c3e02602df4a5a94b2cf19d64e63a56e3d543e2840f32cc138366f2c8df67e7ac9adf4b9a0cd71347

    • SSDEEP

      3072:4tapkwK1nPImZdlWmimp41zhb78dpAqLbm8AEA132a4FNlkqjP:uapkwKVbi8AsdpAqXzhAtObkqj

    Score
    1/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks