Overview

overview

7

Static

static

3

3b01f0db9c...18.exe

windows7-x64

7

3b01f0db9c...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/Inetc.dll

windows7-x64

3

$PLUGINSDIR/Inetc.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

ffdy.exe

windows7-x64

3

ffdy.exe

windows10-2004-x64

3

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDIR/Inetc.dll

windows7-x64

3

$PLUGINSDIR/Inetc.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b01f0db9c9e9476dd4b225a64fec053_JaffaCakes118

  • Size

    197KB

  • Sample

    241012-t1tw6azdmg

  • MD5

    3b01f0db9c9e9476dd4b225a64fec053

  • SHA1

    55af6d2a509fcdaef3441e6307eee3164e31f643

  • SHA256

    9e30f9a97bd295ad276b607f2cb70da2197934913c6b88144679accf1ba64a48

  • SHA512

    dd1ee5b67e1f7a7190de271608c79ee0f3f0b629451d33d58ac3c19ecc6218f16cc615dc4b51e87c3f61d714582d1d12a2da50f2a0e8a93dd47fcd873e1df5c8

  • SSDEEP

    3072:O4eYZ4+1JXJJyjf6uZxNGrLY1swfOZFNFuv1shOZFl:75O81rkSwfkFNFKShkFl

Score
7/10
discovery

Malware Config

Targets

    • Target

      3b01f0db9c9e9476dd4b225a64fec053_JaffaCakes118

    • Size

      197KB

    • MD5

      3b01f0db9c9e9476dd4b225a64fec053

    • SHA1

      55af6d2a509fcdaef3441e6307eee3164e31f643

    • SHA256

      9e30f9a97bd295ad276b607f2cb70da2197934913c6b88144679accf1ba64a48

    • SHA512

      dd1ee5b67e1f7a7190de271608c79ee0f3f0b629451d33d58ac3c19ecc6218f16cc615dc4b51e87c3f61d714582d1d12a2da50f2a0e8a93dd47fcd873e1df5c8

    • SSDEEP

      3072:O4eYZ4+1JXJJyjf6uZxNGrLY1swfOZFNFuv1shOZFl:75O81rkSwfkFNFKShkFl

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      3KB

    • MD5

      8614c450637267afacad1645e23ba24a

    • SHA1

      e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2

    • SHA256

      0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758

    • SHA512

      af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/Inetc.dll

    • Size

      20KB

    • MD5

      50fdadda3e993688401f6f1108fabdb4

    • SHA1

      04a9ae55d0fb726be49809582cea41d75bf22a9a

    • SHA256

      6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6

    • SHA512

      e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8

    • SSDEEP

      384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      ffdy.exe

    • Size

      32KB

    • MD5

      e990392f704e9a61afe7257bb99efa13

    • SHA1

      3d14c9b0b92ffc4249456df43bb015d346ed7277

    • SHA256

      1891cfbdfaf2eda0c8c43294a59b62b95483bf7403e807e150065f548022906d

    • SHA512

      d5259d188868b8454a872e3bcce031f5fe69febfa4a48190a817b47c0bece732b63aeabace88120660efef42e445d781fd98ad99f31d04de1bb0478e6de34b33

    • SSDEEP

      384:/TTWoCLA8vYER2FvroZrJ2TcYER2FvrgoCLA8X:/Wo+twER2tWrJ2TXER2tco+t

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      uninst.exe

    • Size

      148KB

    • MD5

      45b585b3bf294177af776ad51a75a03a

    • SHA1

      c2db4025458aa550436a6fb3a7db46ec96f7c62a

    • SHA256

      9aacb086deead7752675939f0b3cf914bc4cab77ee778fc0d8a0dfe0f33cb746

    • SHA512

      71968b0657aad1d5658a57ece4c54887ff4539b0277be1dbc241abeb5b6c1d2fe0fe35d2e87a8ea2de26739bb43d4bbd48985e818ab7d39e4947c7e50e6c513f

    • SSDEEP

      1536:wf4exGDkeZ4mOoSgJEAJJF4Fjf6uZFHd6Fuv1sE6NO1uWF8:O4eYZ4+1JXJJOFjf6uZ6Fuv1shOZF8

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral13behavioral14

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      3KB

    • MD5

      8614c450637267afacad1645e23ba24a

    • SHA1

      e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2

    • SHA256

      0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758

    • SHA512

      af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/Inetc.dll

    • Size

      20KB

    • MD5

      50fdadda3e993688401f6f1108fabdb4

    • SHA1

      04a9ae55d0fb726be49809582cea41d75bf22a9a

    • SHA256

      6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6

    • SHA512

      e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8

    • SSDEEP

      384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral19behavioral20

MITRE ATT&CK Enterprise v15

Tasks