Overview

overview

7

Static

static

3

318131c55e...18.exe

windows7-x64

7

318131c55e...18.exe

windows10-2004-x64

7

$PLUGINSDIR/7za.exe

windows7-x64

3

$PLUGINSDIR/7za.exe

windows10-2004-x64

3

$PLUGINSDI...G].exe

windows7-x64

3

$PLUGINSDI...G].exe

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    318131c55eff739c86730b268474d637_JaffaCakes118

  • Size

    418KB

  • Sample

    241010-x9kavssfpe

  • MD5

    318131c55eff739c86730b268474d637

  • SHA1

    0180bd1f2ca7cc792fe21dfea3e50c80840391a1

  • SHA256

    4870493ae49e6c0f2eaad25337b2ec1a6c63e5efeac7c2517fbad27fb89f0ea5

  • SHA512

    3de54d3a312bf1aa2ccc8b5567c4b4067b21f8ce3dcc1e8e0336b412952348793ab15962fd790e1864d1833a15c1b6a20f813978156cd5cf68622ce1025c7540

  • SSDEEP

    6144:4sxF9BHmwCjJYp09oLbCYAxG7ouY98QCbYMGP07omHFR+Jz5/hRd2YIvFgNaQPh/:xF9NdSJ7SbrAxG7M94bx/llKnYYKYfzh

Score
7/10
discovery

Malware Config

Targets

    • Target

      318131c55eff739c86730b268474d637_JaffaCakes118

    • Size

      418KB

    • MD5

      318131c55eff739c86730b268474d637

    • SHA1

      0180bd1f2ca7cc792fe21dfea3e50c80840391a1

    • SHA256

      4870493ae49e6c0f2eaad25337b2ec1a6c63e5efeac7c2517fbad27fb89f0ea5

    • SHA512

      3de54d3a312bf1aa2ccc8b5567c4b4067b21f8ce3dcc1e8e0336b412952348793ab15962fd790e1864d1833a15c1b6a20f813978156cd5cf68622ce1025c7540

    • SSDEEP

      6144:4sxF9BHmwCjJYp09oLbCYAxG7ouY98QCbYMGP07omHFR+Jz5/hRd2YIvFgNaQPh/:xF9NdSJ7SbrAxG7M94bx/llKnYYKYfzh

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/7za.exe

    • Size

      574KB

    • MD5

      42badc1d2f03a8b1e4875740d3d49336

    • SHA1

      cee178da1fb05f99af7a3547093122893bd1eb46

    • SHA256

      c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf

    • SHA512

      6bc519a7368ee6bd8c8f69f2d634dd18799b4ca31fbc284d2580ba625f3a88b6a52d2bc17bea0e75e63ca11c10356c47ee00c2c500294abcb5141424fc5dc71c

    • SSDEEP

      12288:myyKdVnyNhXCV4EkP7AIfzNXZ0b5NrnkcAqIV0A1caRI:mKvyNhXCV4E8BXAfrnkcAqU0A

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/[RANDOM_STRING].7z

    • Size

      225KB

    • MD5

      0620e4bd66dca333f93990182f042f2d

    • SHA1

      8b367f1eed05aee9fcdaded4091ee71807842418

    • SHA256

      8842f8c9d02fe1c16a9feaf59865801e4f6c38883144f6a3db95c2b05bd73070

    • SHA512

      6e1423585573c0192e34c99e519eecdb2d780ffd4d41a0d4b297ee2e2d14b5b13874594736273c4e5ed2bf1ca1f60ed0fa28f753ab09cfd766ea9da73328b766

    • SSDEEP

      6144:3Lbii5bkgVuN+xSKV7Wkrsf7LsTl7I3viTienVdfWk:3XikbkgaISKVz0vzQHD

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      6KB

    • MD5

      acc2b699edfea5bf5aae45aba3a41e96

    • SHA1

      d2accf4d494e43ceb2cff69abe4dd17147d29cc2

    • SHA256

      168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e

    • SHA512

      e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe

    • SSDEEP

      96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX

    Score
    3/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks