Overview

overview

7

Static

static

3

2e7f473ba0...18.exe

windows7-x64

7

2e7f473ba0...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDI...te.dll

windows7-x64

3

$PLUGINSDI...te.dll

windows10-2004-x64

3

$PLUGINSDIR/xml.dll

windows7-x64

3

$PLUGINSDIR/xml.dll

windows10-2004-x64

3

VFmanager.exe

windows7-x64

3

VFmanager.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

Ƶ�...��.xls

windows7-x64

3

Ƶ�...��.xls

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e7f473ba0144509a0c2ffdd03d6a008_JaffaCakes118

  • Size

    623KB

  • Sample

    241009-k6l9tssgnm

  • MD5

    2e7f473ba0144509a0c2ffdd03d6a008

  • SHA1

    a7ed54ea7575883465ad59970f35eab6c9577f22

  • SHA256

    789886b0a5eec652849018535de0dc59c09951e853a474bb2c49b9b877d9ef98

  • SHA512

    ec8a35af785f032f74014d6002463d016d279a9b264562b6f4630d04f736a39b2c4446cd7bec3352d1b919dd86e518d65c53fb288dc2d068942f676f7f33d341

  • SSDEEP

    12288:dj/MuadH/DPD8T3KaVST49+cmD+cbgX9gIXeKtsJuoyPNYI8GSlPzwh2iGGDQ:dju938WaVm49+cu+cbSSIXVtCu31389r

Score
7/10
discovery

Malware Config

Targets

    • Target

      2e7f473ba0144509a0c2ffdd03d6a008_JaffaCakes118

    • Size

      623KB

    • MD5

      2e7f473ba0144509a0c2ffdd03d6a008

    • SHA1

      a7ed54ea7575883465ad59970f35eab6c9577f22

    • SHA256

      789886b0a5eec652849018535de0dc59c09951e853a474bb2c49b9b877d9ef98

    • SHA512

      ec8a35af785f032f74014d6002463d016d279a9b264562b6f4630d04f736a39b2c4446cd7bec3352d1b919dd86e518d65c53fb288dc2d068942f676f7f33d341

    • SSDEEP

      12288:dj/MuadH/DPD8T3KaVST49+cmD+cbgX9gIXeKtsJuoyPNYI8GSlPzwh2iGGDQ:dju938WaVm49+cu+cbSSIXVtCu31389r

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      325b008aec81e5aaa57096f05d4212b5

    • SHA1

      27a2d89747a20305b6518438eff5b9f57f7df5c3

    • SHA256

      c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b

    • SHA512

      18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf

    • SSDEEP

      192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      a5f8399a743ab7f9c88c645c35b1ebb5

    • SHA1

      168f3c158913b0367bf79fa413357fbe97018191

    • SHA256

      dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

    • SHA512

      824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

    • SSDEEP

      192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/blowfish.dll

    • Size

      22KB

    • MD5

      5afd4a9b7e69e7c6e312b2ce4040394a

    • SHA1

      fbd07adb3f02f866dc3a327a86b0f319d4a94502

    • SHA256

      053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae

    • SHA512

      f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511

    • SSDEEP

      384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/locate.dll

    • Size

      17KB

    • MD5

      7d3317f57c1a368480ace3c0ca804eeb

    • SHA1

      d4c7e185bc64aac82339f51ba6c21cf0713c9f1a

    • SHA256

      d88a04c1e39db583eaad727fd390fe599ab10198ee040bfbdd22daefadbd2372

    • SHA512

      5598c2e6caa2f66edd48f8c8305e054d4b0740b5f2b7ed92cf197a13ac66ba99a32013d34b3c2e28d007ab7979eb90a50681324eb736b1410e7df1902e4ec32a

    • SSDEEP

      384:ev/vPBkA6dK8wiLe45naPji7hpx2kRV+qgm:evyvwiNnGji7Xxjc8

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/xml.dll

    • Size

      118KB

    • MD5

      42df1fbaa87567adf2b4050805a1a545

    • SHA1

      b892a6efbb39b7144248e0c0d79e53da474a9373

    • SHA256

      e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845

    • SHA512

      4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d

    • SSDEEP

      1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      VFmanager.exe

    • Size

      960KB

    • MD5

      fb5e491f6d4567717dead087e32b5715

    • SHA1

      e0b62ad5e1480384ff8efeb1e1464d49e5f4eda3

    • SHA256

      4418f006823d08682ad2ea3c836bf3ce08c600d83bed877e46bfa3ad4611cbd3

    • SHA512

      0108c461b940948c1cee5ecea994e305cbc3be828a6f992d606cb3997d2089bae87d2af646169c0388aa61d6cc25789f28bc5844a1c36a0305fbba53ba12c6f2

    • SSDEEP

      12288:iQ4hd/ohdiZMSYtxDyO0cLTws5q67MbboiyxBrsNtrbX/hioHc3aR+ZHGGf6J2Q1:i1DglSYWcHwdccbxywLJ6VRr65oS

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      uninst.exe

    • Size

      45KB

    • MD5

      de6b531049ba24e0fbd120ec5904abac

    • SHA1

      ea06b90ba41eca052fcd9929db5a458bfef34b7a

    • SHA256

      30bc4a2274f71f4779e66b142ded0229455ed3e6a66c74ce12e7b5ed2c522338

    • SHA512

      81c6bf20f82076caf635ae436de939e0fdfc8be573a30d850926d029be32a292a5797468f55369ee84a861b75e6dc076e006664a1a9f54fb09d056f7a2275f1b

    • SSDEEP

      768:De3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJad538ScR9rE9hOJ:C3cpyORJLuB4P4AJJ05BczWhA

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral17behavioral18

    • Target

      ƵļǼб.xls

    • Size

      14KB

    • MD5

      226323439a61400f41abd283066a0583

    • SHA1

      2ca82f4ca27d4a3ecbc46e8a6aaa12db2a5258b5

    • SHA256

      b3dcf104dc4837f571f098a1827602843529f25a7b87139ee19f3dc1b2fc2505

    • SHA512

      ce06fa8f037f2eb09aa7f6c69a37a9d23a4940dfbe67275eb1226561c8ff86ce6ecdf555238e0ead7565e8231f6594339c1768341b6692b415a3cc5910896895

    • SSDEEP

      192:8/9XpwpwpwpwtvT278hhPPPPPPPPPPVh63LCU24M7Fpbx3MnwNkNP2i6DDkNc:c1eeeetvT2E63LCUbM7fx3E7P2iUkNc

    Score
    3/10
    discovery
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks