Overview

overview

7

Static

static

3

2c200d77bf...18.exe

windows7-x64

7

2c200d77bf...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.exe

windows7-x64

1

$PLUGINSDI...er.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c200d77bff6924fe8ab40f4f55b9a90_JaffaCakes118

  • Size

    281KB

  • Sample

    241009-gq169szemf

  • MD5

    2c200d77bff6924fe8ab40f4f55b9a90

  • SHA1

    61de0c0fbddeb6b7d89768b3b7bc6a7c46cbc229

  • SHA256

    bc86f2edd13b79db57e4602acbb3d01e9d66803a089253451e254ac34258c59b

  • SHA512

    5e3eef28e39545dcb0a2845de6b2a564dc61a4f0c83cc9c852d786eb50cc8c04dfb81b592086db06357bc9ada868b64140f74a932ba54d8f4ffbf66126347da0

  • SSDEEP

    6144:3saocyLCjnkvIEBsp43cUl1ajH/um8sId6WZosSbTv47F1Zaws:3tob0khsCyH/uPgbTq1Za

Score
7/10
discovery

Malware Config

Targets

    • Target

      2c200d77bff6924fe8ab40f4f55b9a90_JaffaCakes118

    • Size

      281KB

    • MD5

      2c200d77bff6924fe8ab40f4f55b9a90

    • SHA1

      61de0c0fbddeb6b7d89768b3b7bc6a7c46cbc229

    • SHA256

      bc86f2edd13b79db57e4602acbb3d01e9d66803a089253451e254ac34258c59b

    • SHA512

      5e3eef28e39545dcb0a2845de6b2a564dc61a4f0c83cc9c852d786eb50cc8c04dfb81b592086db06357bc9ada868b64140f74a932ba54d8f4ffbf66126347da0

    • SSDEEP

      6144:3saocyLCjnkvIEBsp43cUl1ajH/um8sId6WZosSbTv47F1Zaws:3tob0khsCyH/uPgbTq1Za

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/installer.exe

    • Size

      207KB

    • MD5

      de8e9cb3a534359f5809b9c5980ce365

    • SHA1

      34def3bd6d46a97daa546671513733b9a94c1e8a

    • SHA256

      653db07daeedb23437e723f00ab4f7320e5bb6e6689e38e54896ee44d84cfc71

    • SHA512

      dffe030837a4babfb06419ffd893f54b9856e0f1aafb320e923a7a4aea894154207b0f2998fd0ecaaf0105c6ff1bed95d93a8ae2f531e1c8c3aca248a35b1fe2

    • SSDEEP

      6144:+RrKVYBooo1v0eB24qUxG1DJpqC+D6RwpKJ/eGRKP:+hKyov1ceE4rxG1DJpqkwpKJ/eGRK

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      9f4abe9c1c095cdb505df5db52644d44

    • SHA1

      94295f495f5535e0143107d3ca34141c943ec0b5

    • SHA256

      e41bd375070919e1e194a7c1ca722a30d648a7fa7a4b5c33fb05660813c18bdf

    • SHA512

      d1b6ab6d3e51f69e6ec79aa23629afc9ddedd8a7a668ea61b06bec115c95e2a35dca3ff9b9eb649e4bfece9a2fcd0832fed45f2308dca874f6e819708ed48169

    • SSDEEP

      192:k/QeHNWSvUTfWdXw08LYKFayGLb3MRlbOVlR:OjBvwudT8LJxGnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks