Overview

overview

7

Static

static

3

38bfc6e03c...18.exe

windows7-x64

7

38bfc6e03c...18.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    38bfc6e03c57124e73a542cc7fe283d3_JaffaCakes118

  • Size

    76KB

  • Sample

    241012-gtrf8s1hqj

  • MD5

    38bfc6e03c57124e73a542cc7fe283d3

  • SHA1

    c9e1da1d148baa20bd560b18ae86a17188051ba9

  • SHA256

    79e25e156a184c099194fd1f142a201e18859d1e6b1e9833c655ce03054e0a9a

  • SHA512

    f0398a7406143ba7666c4006624bc6f3f2ed2257d2e41a724bb788e4027cb62e6b0e8c8004b6342dc9551d26709032fbd867220919f5cb6fec029028c6198538

  • SSDEEP

    1536:iRvLphwAO2PH1srwmJm21Nj+uK/2TjtcNUpV3EdekEPDJlSgNamvE:ilpOI2wmJm21Nj+5Mjtcwk6lJrvE

Score
7/10
discovery

Malware Config

Targets

    • Target

      38bfc6e03c57124e73a542cc7fe283d3_JaffaCakes118

    • Size

      76KB

    • MD5

      38bfc6e03c57124e73a542cc7fe283d3

    • SHA1

      c9e1da1d148baa20bd560b18ae86a17188051ba9

    • SHA256

      79e25e156a184c099194fd1f142a201e18859d1e6b1e9833c655ce03054e0a9a

    • SHA512

      f0398a7406143ba7666c4006624bc6f3f2ed2257d2e41a724bb788e4027cb62e6b0e8c8004b6342dc9551d26709032fbd867220919f5cb6fec029028c6198538

    • SSDEEP

      1536:iRvLphwAO2PH1srwmJm21Nj+uK/2TjtcNUpV3EdekEPDJlSgNamvE:ilpOI2wmJm21Nj+5Mjtcwk6lJrvE

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      06bef96b91bfa75b7f7817341a6cd597

    • SHA1

      48a40368fc339ccea1dfda06d2e02bca7d7265c1

    • SHA256

      2ca5590c85cc31285b83bbe569755d909d91b559db2d6ce3bca2fcc075225364

    • SHA512

      5364d0944b4be215fb5d8bb8398e965ff6fa3190a962dd6c491984482321756017f89c2242d77ebcce6666c31fe54a956f2eb3a03a95d64121a1db462ad20a0d

    • SSDEEP

      192:Q6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTtK72dwF7dBdcQOz:Q6JaVh4I5rpPbTt+BdhO

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      f0e51d5722c11a4fe40c97b746c1ffc5

    • SHA1

      8ec31853e9ef08fdc2a8c3c8eaa5f5b9469af193

    • SHA256

      93a27f96055ae6b7f44916e13487b0efa7cd6d762e6768f7cb6427e32bda777d

    • SHA512

      212c1ed753b54e5eccf7e1421bcca86955e09d6e3873f891d3d7076e21f79feb5f1dba350818804a215980875c306283b02f628fbc191d958f0de0f528c7194a

    • SSDEEP

      192:94lsN55M8r67wmsvJI5a299sfoG8I+WhPB3RY+h/G3DNl/qYcVp/12/gszA:9ysdM80dCI5a2LsQ5IlPNRY00AlAxU

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/Processes.dll

    • Size

      35KB

    • MD5

      2cfba79d485cf441c646dd40d82490fc

    • SHA1

      83e51ac1115a50986ed456bd18729653018b9619

    • SHA256

      86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7

    • SHA512

      cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043

    • SSDEEP

      768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      7e3c808299aa2c405dffa864471ddb7f

    • SHA1

      b5de7804dd35ed7afd0c3b59d866f1a0749495e0

    • SHA256

      91c47a9a54a3a8c359e89a8b4e133e6b7296586748ed3e8f4fe566abd6c81ddd

    • SHA512

      599f61d5270227a68e5c4b8db41b5aa7bc17a4bbe91dd7336b410516fa6107f4f5bf0bbb3f6cc4b2e15b16bf9495fdc70832bab6262046cb136ad18f0c9b3738

    • SSDEEP

      192:LO6dJA/ruAFEiUdWWE6hsD4YUdJfbub1awgMO:SKAFERdlxhTYUzqZaw

    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks