Overview

overview

7

Static

static

7

392f58a974...18.exe

windows7-x64

7

392f58a974...18.exe

windows10-2004-x64

7

$PLUGINSDI...64.dll

windows7-x64

3

$PLUGINSDI...64.dll

windows10-2004-x64

3

$PLUGINSDI...RL.dll

windows7-x64

3

$PLUGINSDI...RL.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...sh.dll

windows7-x64

3

$PLUGINSDI...sh.dll

windows10-2004-x64

3

$PLUGINSDIR/inetc.dll

windows7-x64

3

$PLUGINSDIR/inetc.dll

windows10-2004-x64

3

CopyU!.exe

windows7-x64

5

CopyU!.exe

windows10-2004-x64

5

ExtMenu.dll

windows7-x64

5

ExtMenu.dll

windows10-2004-x64

5

Krnlnex.dll

windows7-x64

5

Krnlnex.dll

windows10-2004-x64

5

TrayIcon.dll

windows7-x64

5

TrayIcon.dll

windows10-2004-x64

5

com.dll

windows7-x64

5

com.dll

windows10-2004-x64

5

eAPI.dll

windows7-x64

5

eAPI.dll

windows10-2004-x64

5

eDirTree.dll

windows7-x64

5

eDirTree.dll

windows10-2004-x64

5

iext.dll

windows7-x64

5

iext.dll

windows10-2004-x64

5

iext2.dll

windows7-x64

5

iext2.dll

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    392f58a974133ca88c58a408ea78b98b_JaffaCakes118

  • Size

    1.7MB

  • Sample

    241012-km1ywawhpl

  • MD5

    392f58a974133ca88c58a408ea78b98b

  • SHA1

    f533c4c15a3248179f5c7efef4fee0b1b9b5cf53

  • SHA256

    b2e71afd4996807a75113e882028a4297fd783008b407696ad9437e2fb6d6e65

  • SHA512

    601ae1d8cb2237f5163abc671a7d886e7859bcd883fdec33b173d4860666cba0d72b805095ea17e9056723a3de0f9ad4a76b3c7741757b4dd45c704f13b2d4d9

  • SSDEEP

    49152:aCwtLDksLPKOTAZ0mJrDpTJJyjhtB9a9grXbx6DZD7I:aCwxzLPOSm9EjhtBoeHx6Di

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      392f58a974133ca88c58a408ea78b98b_JaffaCakes118

    • Size

      1.7MB

    • MD5

      392f58a974133ca88c58a408ea78b98b

    • SHA1

      f533c4c15a3248179f5c7efef4fee0b1b9b5cf53

    • SHA256

      b2e71afd4996807a75113e882028a4297fd783008b407696ad9437e2fb6d6e65

    • SHA512

      601ae1d8cb2237f5163abc671a7d886e7859bcd883fdec33b173d4860666cba0d72b805095ea17e9056723a3de0f9ad4a76b3c7741757b4dd45c704f13b2d4d9

    • SSDEEP

      49152:aCwtLDksLPKOTAZ0mJrDpTJJyjhtB9a9grXbx6DZD7I:aCwxzLPOSm9EjhtBoeHx6Di

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Base64.dll

    • Size

      4KB

    • MD5

      f0e3845fefd227d7f1101850410ec849

    • SHA1

      3067203fafd4237be0c186ddab7029dfcbdfb53e

    • SHA256

      7c688940e73022bf526f07cc922a631a1b1db78a19439af6bafbff2a3b46d554

    • SHA512

      584ae5a0d1c1639ba4e2187d0c8a0ac7e54c0be0a266029c4689d81c0c64a7f80e7d918da0df5c6344f9f7a114f30d8f2feda253b29e813bae086604731a3d8a

    • SSDEEP

      48:SxSrr7xd14m4bLKwvnvcfDw1hEiauGkDVK+hIg4qT9/3lt:zr7xd14m4qw/vGwrEickDVthcE/

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/blowfish.dll

    • Size

      22KB

    • MD5

      5afd4a9b7e69e7c6e312b2ce4040394a

    • SHA1

      fbd07adb3f02f866dc3a327a86b0f319d4a94502

    • SHA256

      053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae

    • SHA512

      f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511

    • SSDEEP

      384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $PLUGINSDIR/inetc.dll

    • Size

      20KB

    • MD5

      50fdadda3e993688401f6f1108fabdb4

    • SHA1

      04a9ae55d0fb726be49809582cea41d75bf22a9a

    • SHA256

      6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6

    • SHA512

      e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8

    • SSDEEP

      384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      CopyU!.exe

    • Size

      404KB

    • MD5

      a1110cb7e0f2731ae9a50c35facf8d46

    • SHA1

      54d4a4e68aa453f8f4c37b73f2612ca486b56960

    • SHA256

      7ddcc047fd7166a6ac8f44e035908ff9aa4af49dfc55d335227495e875daf2e1

    • SHA512

      1ac9796818e2ecc43558429c95bac0f81f9d2d09ff5a7812a37672c7d5e9cdc219aaf3764ce528d537bd58f0251369199f116e2f6671d753e20535981ce15d4e

    • SSDEEP

      6144:wBbQD3oHBFZhLPWq+NyWj5T7fXz9xubBrmSeqxNfuz:IbQLo/neqIRP581KcG

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral15behavioral16

    • Target

      ExtMenu.fne

    • Size

      84KB

    • MD5

      d6dc760cbbb0e54ea3d0a80a913752e2

    • SHA1

      2dff8d16b5c0c805afe53f1790c7e1762cb2ea96

    • SHA256

      7c5ecf3d7121a9e615729e8d55cb0397cddd14c5cc455da5a89858347388d99a

    • SHA512

      d0caa5bf3bc5a532befc3ede42c8263f6b7e18900ea839f49d543a6068ef9aa8eb00441a4216dd0e0633a9e471e88b9c0447efd0684605fb071ed6895b221547

    • SSDEEP

      1536:fKsepQKRqwVnisBr86ijW6dycckMWecWAQzTw5uYLKm2nouy8:fKJiBHdy60c+pAQHwE9out

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral17behavioral18

    • Target

      Krnlnex.fne

    • Size

      30KB

    • MD5

      32ffb8c1a8f6189301f17fb41bb8c584

    • SHA1

      f27f4f4eb9d0d44d97ea87b57d4c60900b88cf5c

    • SHA256

      8a46e43c368785ec76394bc47ae31c9176ad813d383fa84b9875bbd393b9e0e4

    • SHA512

      5af7f3005404f89b551d338618cf5691a784dc7372291df11483f08e9b17b7659250df3db392f2934b9826f0b2d617282bf23251b42703ee4cd0b6599bbab5dd

    • SSDEEP

      768:OtwLL3jMZYjMldkzA5tUxYJ++DfF2SjnbcuyD7U:OML5WdkzA5tZ3F1jnouy8

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral19behavioral20

    • Target

      TrayIcon.fne

    • Size

      62KB

    • MD5

      24984fe2bdc4574646b7cb4054d8fad5

    • SHA1

      817cf70f847313f00f21295b1bd41534cd59b166

    • SHA256

      bc97cfcc110eac43ba1046d3b77cda237893ac211321edbec5fcdc2591e23875

    • SHA512

      fdf9a3d83293e90a12356199a9173266a66a087d229670aea14a30b637e67d31d3919dcc24d0dba0eb4878c6dfc901d00404d51bb4c68be68489de9f7c0773a3

    • SSDEEP

      1536:Wz/salymP1KG6vLEYxxWRRLQqFUxiUGh2iVnMGhKAanouy808X:WzJfV0AXQMU0UGh2iVbOoutN

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral21behavioral22

    • Target

      com.run

    • Size

      111KB

    • MD5

      d52ed80df673acdcabc31241d72a5272

    • SHA1

      3bbe2fcbf24080f54cda98db03b15bd10ec67540

    • SHA256

      472b63a325ea31271d95eb6132d6682432496ab61ba2cf7e8fec96e54ada059f

    • SHA512

      283de0305bf357d9d1e8fdda57a58968c81afef5308533fc9073ed93557e47b3f52d3c535328edd0ab71f97ebbd2583607ebf9fceeb70e185f9ef62633db9217

    • SSDEEP

      3072:kmDP7euuVCdIJK1BCucQ+WEmUJVdHd0Rpx9UG5outJ:riRAIECDQ+pbXHEHU8oS

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral23behavioral24

    • Target

      eAPI.fne

    • Size

      118KB

    • MD5

      1bcf0c45136bea1a38a9996afe96711a

    • SHA1

      8da309f76d4a82faa19d6120c870c70d835c1039

    • SHA256

      623f1a8d41619899ac20b0cadfb61833d633ce9f8e31ed5212cb0c968694fea0

    • SHA512

      4611298459b9d07387a5710ed5417644821d406b5d82697bcbc9440cc8749866b07e85d9f7c3d773b3836b5980c0031c08b100bfaf9fde86a7a0aaf7668b25df

    • SSDEEP

      3072:RPInE7/g1Hq++ACxZFyIL2qqICfVap8outjq:FInE7/g13+rPXL2fIwap8oSj

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral25behavioral26

    • Target

      eDirTree.fne

    • Size

      60KB

    • MD5

      0d37eba238b2d84644c65c4bbd33ec9d

    • SHA1

      225b6c37b8ce4edc4c31b937cbb47345c83610c1

    • SHA256

      d3b7e9a6ab6f80564bb67b3e3ed3677a2822ed596ef2c2e5f9ad170c244fc715

    • SHA512

      62621f22bff0fd5ea732da32c8f0f881a030a6fe5b742d5b1d950c143cae276c543d8efd97a57e1b84e1bc369050345340a813c62c97c3445a50a40e28e3d992

    • SSDEEP

      1536:/367tAZQeDe0OMoILYRp+rewvO4XBumnouy8x:f67tMe0VoTqBloutx

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral27behavioral28

    • Target

      iext.fnr

    • Size

      79KB

    • MD5

      18440e18a421f23dc86620ce293ff124

    • SHA1

      cfd595d4f66797f8e49359b5d6df2b9ba7d9b0a2

    • SHA256

      c2fec704d74a78f2e17f332a2e3df182f0653626946eb6c99d9415a3fa4b19eb

    • SHA512

      c20fba15ccafa8ce2d2d03d4d60813fad6a63d99f92fdb905443e07f326688e008cca033b9d71015e5d5a2c7f23fe2b3c9382d28a63a67ef23714006a59cc3e8

    • SSDEEP

      1536:fQJbDUtQbWYS7ZH5rR+ifWtql0eXZ90iCAY9Ymbnouy8CQI:CpS7FZrR+ifCqqEefZloutzI

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral29behavioral30

    • Target

      iext2.fne

    • Size

      103KB

    • MD5

      e34c57982d152855298d71f5effa30bb

    • SHA1

      a09193a055573f530b49850e8910a676b4ad3831

    • SHA256

      dbb9ce7f9324828bdfee8bc00b7826006da692af86e9bb5ae4b081e687d00e59

    • SHA512

      0ae7f917b0e758bb9594c3294b93793459cdaeb85fe4eab6d82ff65f09fa8109ca18e0f03f479d2cc260300356f3539cc6bbb3c127dc42f5187b82ea9ab913c3

    • SSDEEP

      1536:QxMri/aL0eJuiVQYP/2Z6K5Ux0I/TEzRllnft6oLexPiXpDsP9qe/nouy8l:QxjaVJutY32chqzFfI4exypQVvoutl

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
7/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discoveryupx
Score
5/10

behavioral16

discoveryupx
Score
5/10

behavioral17

discoveryupx
Score
5/10

behavioral18

discoveryupx
Score
5/10

behavioral19

discoveryupx
Score
5/10

behavioral20

discoveryupx
Score
5/10

behavioral21

discoveryupx
Score
5/10

behavioral22

discoveryupx
Score
5/10

behavioral23

discoveryupx
Score
5/10

behavioral24

discoveryupx
Score
5/10

behavioral25

discoveryupx
Score
5/10

behavioral26

discoveryupx
Score
5/10

behavioral27

discoveryupx
Score
5/10

behavioral28

discoveryupx
Score
5/10

behavioral29

discoveryupx
Score
5/10

behavioral30

discoveryupx
Score
5/10

behavioral31

discoveryupx
Score
5/10

behavioral32

discoveryupx
Score
5/10