Overview

overview

7

Static

static

3

2ebc130176...18.exe

windows7-x64

7

2ebc130176...18.exe

windows10-2004-x64

7

$PLUGINSDI...er.exe

windows7-x64

1

$PLUGINSDI...er.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ebc130176d7da05130ee48e6c1e9a96_JaffaCakes118

  • Size

    281KB

  • Sample

    241009-lhvfzavbpl

  • MD5

    2ebc130176d7da05130ee48e6c1e9a96

  • SHA1

    b10bad84e70e9239df05808953143b93d475f380

  • SHA256

    d78a525bd03f4a678d9837f52f3482a69f183002e3ddd2f6b4c9c459a97968cd

  • SHA512

    6a3c529b8e96c8d971e4d441a6100ff1befa637e29382424108aaeade5321a403ad3d03e1c30efbe85be6c5aa6c8db5271e79388d87528b7d5dc85fc3c306a5a

  • SSDEEP

    6144:isaocyLC4wGRU7/njVJy9p1Tq3uoFtqLZhwKte/F:itobAGRUTjVJkUuoFtUXwKS

Score
7/10
discovery

Malware Config

Targets

    • Target

      2ebc130176d7da05130ee48e6c1e9a96_JaffaCakes118

    • Size

      281KB

    • MD5

      2ebc130176d7da05130ee48e6c1e9a96

    • SHA1

      b10bad84e70e9239df05808953143b93d475f380

    • SHA256

      d78a525bd03f4a678d9837f52f3482a69f183002e3ddd2f6b4c9c459a97968cd

    • SHA512

      6a3c529b8e96c8d971e4d441a6100ff1befa637e29382424108aaeade5321a403ad3d03e1c30efbe85be6c5aa6c8db5271e79388d87528b7d5dc85fc3c306a5a

    • SSDEEP

      6144:isaocyLC4wGRU7/njVJy9p1Tq3uoFtqLZhwKte/F:itobAGRUTjVJkUuoFtUXwKS

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/installer.exe

    • Size

      207KB

    • MD5

      de8e9cb3a534359f5809b9c5980ce365

    • SHA1

      34def3bd6d46a97daa546671513733b9a94c1e8a

    • SHA256

      653db07daeedb23437e723f00ab4f7320e5bb6e6689e38e54896ee44d84cfc71

    • SHA512

      dffe030837a4babfb06419ffd893f54b9856e0f1aafb320e923a7a4aea894154207b0f2998fd0ecaaf0105c6ff1bed95d93a8ae2f531e1c8c3aca248a35b1fe2

    • SSDEEP

      6144:+RrKVYBooo1v0eB24qUxG1DJpqC+D6RwpKJ/eGRKP:+hKyov1ceE4rxG1DJpqkwpKJ/eGRK

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      9f4abe9c1c095cdb505df5db52644d44

    • SHA1

      94295f495f5535e0143107d3ca34141c943ec0b5

    • SHA256

      e41bd375070919e1e194a7c1ca722a30d648a7fa7a4b5c33fb05660813c18bdf

    • SHA512

      d1b6ab6d3e51f69e6ec79aa23629afc9ddedd8a7a668ea61b06bec115c95e2a35dca3ff9b9eb649e4bfece9a2fcd0832fed45f2308dca874f6e819708ed48169

    • SSDEEP

      192:k/QeHNWSvUTfWdXw08LYKFayGLb3MRlbOVlR:OjBvwudT8LJxGnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks