Overview

overview

7

Static

static

5

14563b7a91...18.exe

windows7-x64

7

14563b7a91...18.exe

windows10-2004-x64

7

$PLUGINSDI...md.dll

windows7-x64

3

$PLUGINSDI...md.dll

windows10-2004-x64

3

$PLUGINSDI...re.dll

windows7-x64

3

$PLUGINSDI...re.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ps.dll

windows7-x64

3

$PLUGINSDI...ps.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    14563b7a9170d30d86b53b4905aa8799_JaffaCakes118

  • Size

    176KB

  • Sample

    241004-wbyj6a1hmg

  • MD5

    14563b7a9170d30d86b53b4905aa8799

  • SHA1

    243440a56b829afd924c841fe0327eb1c5ce4cf7

  • SHA256

    8402ab51f20d5e88e806e2b753ccfab384aa0290a93e2b8d2364b86ea63d8d2c

  • SHA512

    4b6f1423f38e4535613180774d1af39d061250ca756136bbf2638fcfc17d219628db039b5aac7b59e31d4c82e1e19ca575dfceeae35b806c1f6aa13bc36fbb35

  • SSDEEP

    3072:MglVWgFyqz42MAbJyrewxNWyGTwMFvD5vxcBk83ACmthTK2Ne:MglVhbU2LbJKeS0xvF5xcBkZRe

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      14563b7a9170d30d86b53b4905aa8799_JaffaCakes118

    • Size

      176KB

    • MD5

      14563b7a9170d30d86b53b4905aa8799

    • SHA1

      243440a56b829afd924c841fe0327eb1c5ce4cf7

    • SHA256

      8402ab51f20d5e88e806e2b753ccfab384aa0290a93e2b8d2364b86ea63d8d2c

    • SHA512

      4b6f1423f38e4535613180774d1af39d061250ca756136bbf2638fcfc17d219628db039b5aac7b59e31d4c82e1e19ca575dfceeae35b806c1f6aa13bc36fbb35

    • SSDEEP

      3072:MglVWgFyqz42MAbJyrewxNWyGTwMFvD5vxcBk83ACmthTK2Ne:MglVhbU2LbJKeS0xvF5xcBkZRe

    Score
    7/10
    discoveryupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/ExecCmd.dll

    • Size

      4KB

    • MD5

      b9380b0bea8854fd9f93cc1fda0dfeac

    • SHA1

      edb8d58074e098f7b5f0d158abedc7fc53638618

    • SHA256

      1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244

    • SHA512

      45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c

    • SSDEEP

      48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISpcre.dll

    • Size

      164KB

    • MD5

      bfe060c22b44914e05d3f5367de6c9fe

    • SHA1

      24c72b0b57b0066a5e8b235104a0502400e44b9a

    • SHA256

      43041f8540dccbc33268bfbef53037d17170b037f6393e77c21429f303ae828f

    • SHA512

      ad3a23edd8d62b198e4a2ccf03f6d607dee41fa23fd6f9dfabdc5ee424b5e22a6e00b8a28e50fe177829a2cc25ce05484423e97c682036fc5146e2adf560bc44

    • SSDEEP

      3072:5YFyk+vtvpoYYPkoYMtXTP5V+4Km//sbJVlseEOb+Y+UT:KFyznYntXL5XKCk9MeEm7

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/ToolTips.dll

    • Size

      4KB

    • MD5

      9a0da2692764bb842411a8b9687ebbb7

    • SHA1

      5c3a459faa08a704bdf162476897ad4580ae39bd

    • SHA256

      28aeaa48c929188a0d169887cc3f16370741467ae49e1db59763f030710a6bbb

    • SHA512

      814d686617df4fe9f50a93dac9428babff3a14836aa27b4666976379ec3fafcab65fd82d8886998fa65e7b59dc192ca067cf8b4cdeb8ef551812912d80dab8ed

    • SSDEEP

      48:apm2+v7BWCLWQqLa7JZ0ZK59HXesxdrqZZSakw6/K:Ymjv7BWoTicJZ0ZKPHXVx1MOw6

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks