Overview

overview

6

Static

static

5

3f52d3dabe...18.exe

windows7-x64

5

3f52d3dabe...18.exe

windows10-2004-x64

5

$COMMONFIL...og.dll

windows7-x64

4

$COMMONFIL...og.dll

windows10-2004-x64

4

$COMMONFIL...m.html

windows7-x64

3

$COMMONFIL...m.html

windows10-2004-x64

3

$COMMONFIL...xt.dll

windows7-x64

3

$COMMONFIL...xt.dll

windows10-2004-x64

3

$COMMONFIL...an.dll

windows7-x64

3

$COMMONFIL...an.dll

windows10-2004-x64

3

$COMMONFIL...fe.dll

windows7-x64

6

$COMMONFIL...fe.dll

windows10-2004-x64

6

$COMMONFIL...an.dll

windows7-x64

3

$COMMONFIL...an.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...Ex.dll

windows7-x64

3

$PLUGINSDI...Ex.dll

windows10-2004-x64

3

IEProt/IEProt2.exe

windows7-x64

6

IEProt/IEProt2.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f52d3dabeef100bdb1343fb0d8c480e_JaffaCakes118

  • Size

    1.3MB

  • Sample

    241013-mgybxawfqq

  • MD5

    3f52d3dabeef100bdb1343fb0d8c480e

  • SHA1

    85345c3e6cbb4d4dfdfa8b32a70cf9b35ba190aa

  • SHA256

    790b000a5565554a328cfcc6889c2c151a15614616cf155dc8afb4217037b183

  • SHA512

    f99969292f2ec3e9281dee6388a2ff6717b97ced1da9f22e70dbc134bd22f805214ddaf2d095a23c24cbbdff5b58a45fb5f5d1429528710f13730a73d1d24a53

  • SSDEEP

    24576:o1d6o55GEbX8fWKMbF47PlCqJjc5RqKfQ1DvuAb+lSSDjMYYWsi8ftYEut:4rHbX8fWKxoqJA5RqKY1zuAb8uNiclut

Score
6/10
adwarediscoverystealerupx

Malware Config

Targets

    • Target

      3f52d3dabeef100bdb1343fb0d8c480e_JaffaCakes118

    • Size

      1.3MB

    • MD5

      3f52d3dabeef100bdb1343fb0d8c480e

    • SHA1

      85345c3e6cbb4d4dfdfa8b32a70cf9b35ba190aa

    • SHA256

      790b000a5565554a328cfcc6889c2c151a15614616cf155dc8afb4217037b183

    • SHA512

      f99969292f2ec3e9281dee6388a2ff6717b97ced1da9f22e70dbc134bd22f805214ddaf2d095a23c24cbbdff5b58a45fb5f5d1429528710f13730a73d1d24a53

    • SSDEEP

      24576:o1d6o55GEbX8fWKMbF47PlCqJjc5RqKfQ1DvuAb+lSSDjMYYWsi8ftYEut:4rHbX8fWKxoqJA5RqKY1zuAb8uNiclut

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $COMMONFILES/Angels/AgLog.dll.tmp

    • Size

      300KB

    • MD5

      0e38c074b9c529e713ac5a70e8c3852f

    • SHA1

      24564476bdc2de258df803dbe8ffb00255a19ee8

    • SHA256

      fc0fca68cbf4ed56663fa62aa72019865301c8ae356b2c6077dff69d02e9a227

    • SHA512

      fc876edaf7b8701573038202e57be45f93e0fe7e3436abde226cd43b6b715defbdb296d70f7d4b53f481dc73b156eb0a8baee51470c69b7a15ace9b7e6c4e06d

    • SSDEEP

      6144:4Cv6QXUtiBav//wX4Yz0jfTc3B3QvZusUht:BPi/wX4YzYfTchQhur

    Score
    4/10
    discovery
    behavioral3behavioral4

    • Target

      $COMMONFILES/Angels/IE360.htm.tmp

    • Size

      932B

    • MD5

      4e72a0d4ecf37f91b9fc9fd2e27a6661

    • SHA1

      c3e9117731947e1a3e2f9aaea9356cedf5fe53da

    • SHA256

      609471ce7403a914ef23d91082242c876e1b2ffcfcc6a70ab1309f45b387d1d4

    • SHA512

      ffc517b819c9e995f0aadef0583b099b16bff262315a9f27ba1c6306d0e0fde30c32ecaac19fdaf9584f182b64677699b42d40606f4038637485b2b5601d79bb

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $COMMONFILES/Angels/IEMenuExt.dll.tmp

    • Size

      8KB

    • MD5

      553d3d790fa9fb5ca106b6c3f4f007d5

    • SHA1

      239168fd7a6baa9133d62ef0b5e5ad6ad5f35acf

    • SHA256

      fb7701a50094575297c3a48dcc072dd0b8dcb6877561e6ca13d9a74aba908cee

    • SHA512

      a0fb60e74b59840767a01511f1ff1f89e08084eeac1643927cb786d1444008f3ce5d44d3ca6ba283e30e3a3f427aaedd092bdb159f950750443a17a7d0c6af23

    • SSDEEP

      96:PVc3bh8cIfLi85xACTQw7y4NmefUcQ6N3Bz9xKp6bIdd3UZ4wjTJpyegBbBakbKY:dcLh8HfLi8By4NLm6TTKf3HFbBnK/H1+

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $COMMONFILES/Angels/IEScan.dll.tmp

    • Size

      60KB

    • MD5

      eaa8b5f346fc9c671df358cb7d98e1c5

    • SHA1

      3d0b6476b004d8f2bb731c75f958f0c13c496789

    • SHA256

      65fc1e8c471a893c5ef18ceb52e36372d73f5377e2cfd1f0476df4b1ae403e5f

    • SHA512

      95e115c4c11af3202b6fc90a533ca14c1480b21fd8b3a0bf11361a0e43a944c114a0130c73511438076ed373437fca1750bdf0a66314a2dd952e0dd2f58b97d8

    • SSDEEP

      768:OQ0Uz/q4DHd5IytXGU1ZclADgN87Hra48fd+R0iyQpH/xL53+SeeKWr39gLEUbG5:f0f4D9yYJlDgMgfdtyt/P+Cj9g4QG5

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $COMMONFILES/Angels/IEsafe.dll.tmp

    • Size

      1.0MB

    • MD5

      187acf37e0013594b7cf40974d619f2e

    • SHA1

      f761952326b3de5e87d80958013795e7a9e2de49

    • SHA256

      5719b9d21a4a77dff2b3f84243cc01ebb3c0cd7005c87154c64d119d9a5a745a

    • SHA512

      17b94951552916c92982e477ffbf2d0ab6ee7b1cd7a540c5c8520157d99d32105355ba24073fc11513053eb167c69b7ff3589734f21a7e0d13850301354ece32

    • SSDEEP

      12288:juCuc3mTlH/gt3Uv/Os+Bx4mwEjazFo5JtZ4ISZmo9rBRZsNYVlxdHhwxySkGK6H:jkRZsNYVLwxyYjgv9Jad

    Score
    6/10
    adwarediscoverystealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral11behavioral12

    • Target

      $COMMONFILES/Angels/Scan.dll.tmp

    • Size

      1.2MB

    • MD5

      023bf6617c3fc1afe014d0b7a9e5bd6f

    • SHA1

      945a8d8468a1fb07cb887e559f678bde064b9a0b

    • SHA256

      feccbc30132cd4eff44e5aa2b2b08ccca334247e537e427ab44c530e5feedab5

    • SHA512

      b43159e80c79513fb348def05c3ac8dc1c8c0b25a981eedb50263549e5433cbfffcfb5fb423758ec7bd61ce3bb105b8df22a35e6d8690b89ccc86c4f3177350b

    • SSDEEP

      24576:CgcIwdCFEXGwz6Ff78H8KZ7SI7ErlB6azPTkkkkkkkkkkkkkkUkkkkkkkkkkkkk/:CgcIwi5nQ24EreytZ2cL

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/FindProcDLL.dll

    • Size

      31KB

    • MD5

      83cd62eab980e3d64c131799608c8371

    • SHA1

      5b57a6842a154997e31fab573c5754b358f5dd1c

    • SHA256

      a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294

    • SHA512

      91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9

    • SSDEEP

      384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $PLUGINSDIR/nsWebEx.dll

    • Size

      296KB

    • MD5

      cc329d5153c6b5949ee9dcedb12926ab

    • SHA1

      75744729739a8db546c08102dde407574d592a3b

    • SHA256

      0974e41b380a2e6fa080b04b7558d12e92d5d0885edf6025b7d0000201de59da

    • SHA512

      42b511bcbc639b6d6b3f657830a56c287d30a9ea0fbb5e63ec1db21bfcbd403a3fb3400f59ed94970fc4a71ca0830749a3f2a3190399c6e596413bba876a0b2e

    • SSDEEP

      3072:pdVMcUtREsBESl+4+dTqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5dnD:xMcUjpBrAnTqdKcS0Hwjl2JwbD

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      IEProt/IEProt2.exe.tmp

    • Size

      3.5MB

    • MD5

      809c1ecb6083ef23ff20db94847a07c4

    • SHA1

      d55a8365d108473ce85d3be5edd9e612ffc13260

    • SHA256

      df1934a39fd03c0fd48343e752d8583d8fe75b6705d3d60e88dec1672c65d13d

    • SHA512

      5410f5b08ef9bf608e4f2a0ebf6d1d7812865cd45016dbb4a25532080025580c0436df89c8311afcc10264ffee60aa4a3f1c7ed0ee4774c3495d9230e4c05215

    • SSDEEP

      12288:kx1uTyXTnXJntnFPAxdmMF5qBmkhTdWghkXATZXs:k7OyD1t3MFEh4SXs

    Score
    6/10
    adwarediscoverystealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral25behavioral26

MITRE ATT&CK Enterprise v15

Tasks

static1

upx
Score
5/10

behavioral1

discoveryupx
Score
5/10

behavioral2

discoveryupx
Score
5/10

behavioral3

discovery
Score
4/10

behavioral4

discovery
Score
4/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

adwarediscoverystealer
Score
6/10

behavioral12

adwarediscoverystealer
Score
6/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

adwarediscoverystealer
Score
6/10

behavioral26

adwarediscoverystealer
Score
6/10