General

  • Target

    7f1d7836a2de1559325cdccd0db0e453_JaffaCakes118

  • Size

    1.5MB

  • Sample

    241030-n432casgpg

  • MD5

    7f1d7836a2de1559325cdccd0db0e453

  • SHA1

    b95fab52d999051614afa951fe1adb751a566467

  • SHA256

    37b2eacbebdf6160c444d3bf802e5fb0b812a7d0a68d29a5ba122263acae9c8a

  • SHA512

    d8765ebf86c840407e6a6235ec413f1e2482b13c2696aad54b3b6b15cdc960ceba45b75112949b6c600dee3227721c26e2c6616a93d3a9fb6a0c8a3d32fe5308

  • SSDEEP

    49152:rHeOqb4CYXEdPp26SbCt6CL97osOZxOncvA:DeOqb4ZE1sZbCtdL97oKQA

Malware Config

Targets

    • Target

      7f1d7836a2de1559325cdccd0db0e453_JaffaCakes118

    • Size

      1.5MB

    • MD5

      7f1d7836a2de1559325cdccd0db0e453

    • SHA1

      b95fab52d999051614afa951fe1adb751a566467

    • SHA256

      37b2eacbebdf6160c444d3bf802e5fb0b812a7d0a68d29a5ba122263acae9c8a

    • SHA512

      d8765ebf86c840407e6a6235ec413f1e2482b13c2696aad54b3b6b15cdc960ceba45b75112949b6c600dee3227721c26e2c6616a93d3a9fb6a0c8a3d32fe5308

    • SSDEEP

      49152:rHeOqb4CYXEdPp26SbCt6CL97osOZxOncvA:DeOqb4ZE1sZbCtdL97oKQA

    Score
    3/10
    • Target

      $PLUGINSDIR/MngModule.dll

    • Size

      862KB

    • MD5

      992ef262f488bd71005d04644b128788

    • SHA1

      6a35e4ba677cc9e03fac85983bd968ab8862b16c

    • SHA256

      ca89fab589e51e74468860dec0a63eaf4bb9a80a8444fde7783f43ec7b96916b

    • SHA512

      6e619c4a2b382b2f7e9a9aab5cc9578caced894092cec9abd96fa9958a0506042afc463e1a767eece3115ed5db62d207b84df6dc919a84330cecf9309cb59578

    • SSDEEP

      12288:fQD1kl1ZVQQNaA13/NY9+pQwqDeIGvKb2yuYNemSIWGJjrirC6B5LgZku:o+l/Njp/bTyuYFWGJjrir3Fu

    Score
    3/10
    • Target

      $PLUGINSDIR/PPAP.exe

    • Size

      181KB

    • MD5

      ecf05fb40bb1eedda1ba50280ee91c74

    • SHA1

      a9b160c78cdb26e2c7f8a8a172dfbca832281df7

    • SHA256

      3c90f9e0159b911dd9559d86b80ebf9fc2a83908993c4cffacdc5d4ddcb9baf5

    • SHA512

      8c630615ec1041f4e6f88fa744529a564e6a7442a3666015ae519d68cc61904500d932f621af4b8d231a32e81d32bb1754cc5947e61093a87ae92bd0008ae7a5

    • SSDEEP

      3072:iktGuFdoU712zneJxEpiEIII1IIaVkbAGAdzB3Yt/nGbMQ:7roU52znAEgEIII1IIaVBGM3ZAQ

    Score
    3/10
    • Target

      $PLUGINSDIR/PPInstallLog.dll

    • Size

      41KB

    • MD5

      a04d44787b28d37b4334c184ea4faae8

    • SHA1

      47a5038f2fc45841420a89f08eefd35191aa1fe7

    • SHA256

      34f0eb6f3b7deda82929fba6993eb27cd26d0b791be8031ce0b4729a7dc9dd46

    • SHA512

      a529e5c412dce90f34e13a185e81b757adf140447167b310d056d2b380873683e5b6681f5810be7d1194cfdd64eda25b87a1a5aae70ed4e48be5aa64acbd5346

    • SSDEEP

      768:oCIMnU6AUW1qDyaoKg6V86jJaJy+mW3jLWQbCo:lIMSHP6C6j4JqWTaECo

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    • Target

      $PLUGINSDIR/TipsClient.dll

    • Size

      237KB

    • MD5

      25853e8bd3e283e15024d1111535ede7

    • SHA1

      5b56e1dea924520b6c61ec09113c33fa3db573a4

    • SHA256

      ccbce22f01208cc8fc96de789ab9fedefc851f588cd4c1fbd6d9edc7ac2f4eb5

    • SHA512

      5bfa0e6bed05f1ab79ee97d1bd9bf1d48ba3d263a44e538d005af820c41c659eb112a4f19152e0841301fbd8b9618e8f353fe672df88b66e45c4719784202144

    • SSDEEP

      3072:G4CrgXFGPASJR81rXwRtTgvK8SvP4N6MPuFjpChe8WgoqILjWjpWyI9Se/tNWrLL:yg1TwsS8HUdjpChSpGje/tNyykwbC1

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Target

      $PLUGINSDIR/admodule.dll

    • Size

      812KB

    • MD5

      a256337aedd10bfe85aa8d0cc759c4b1

    • SHA1

      292012487cd89842964712e1ad26e7dfb2c1fcb1

    • SHA256

      e2c24c63ac4da0e34a253c3cf8d6ec31da39740376fe2e87e52ba0f32c450640

    • SHA512

      250666689c156809dae72648e99d0a9abdb105375044c956d6c50e4107dce236d95a7925611566f8963b7bb0e956631aff9cce65695f1b7e493cfd4c849dab72

    • SSDEEP

      12288:01uRtBrct5O/dyANBseR1+bQE5NyH8/uUIid7vV+4KCaEovvV:3gturIGjUIid7rKvvXV

    Score
    3/10
    • Target

      $PLUGINSDIR/crashreporter.exe

    • Size

      193KB

    • MD5

      ef3540f822902149f6519f5cbd06dc1b

    • SHA1

      fd2fa2e58d4f895ed0ae3260f101b37fc0eaef48

    • SHA256

      b2d19487e25e991b1d7e14e332b051a73805c9c4e4069a35af73b73af15d9a56

    • SHA512

      58072f705b6aaf2ec7a9fb6c2f0501a27a92c6d8874666fccc907be5988a5c1a28978a0439f8c5467eeac3c5b71ffb02c360d47b06db2a76eb38839922087e80

    • SSDEEP

      3072:atu1sefJ/nIBxioCtOA2P+BHLutd4iCc9:atMfJPIBBCymFutdWc9

    Score
    3/10
    • Target

      $PLUGINSDIR/mframe.dll

    • Size

      609KB

    • MD5

      cfca286051452ee4ade71c64021424e9

    • SHA1

      80bdc7dd1a5b478b2e86d6d99674794cc75d4f2e

    • SHA256

      1f3c0af59c46dc9a04bbc86ec5e363622d87118dd32c0782bcbbd964086aedd4

    • SHA512

      8a2e88bccfe0fbdef29d9bcc7c7dc5e7451f32aa1e75a5592546f7b7013d581b5cebec7c80565ed6debea4e9a346e869cd728761cbbba3efac703167b2664cdb

    • SSDEEP

      12288:c+rCmGX/1n7/IWWVMjhsVTgpiNq5Vvk8fNpq92VH5xCZ:dmTpnC19yHPCZ

    Score
    3/10
    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    • Target

      $PLUGINSDIR/pnsis.dll

    • Size

      72KB

    • MD5

      dde7cd3719145ecf3c89d2a1e79ca1f3

    • SHA1

      92802c38f88c4d57f0b1153b04b4de43af4adcde

    • SHA256

      c930819a0f64879fe3a96c606da4be49613693a43b9b1060dc870bec7b3ab47a

    • SHA512

      dd67858919fea31f0d4df0c012dc9605fc68bb7512924fee04ae41528d02f8f7ddfd32949841b676735a9d3d81f7dcb455854f20467a4a40ee9f48babd5bee5a

    • SSDEEP

      1536:b3wED/xETX1V6iCKVADJ1ON2LqbaxkO7ln:l/xm6NKqD2E/xZ7ln

    Score
    3/10
    • Target

      $PLUGINSDIR/pplugin2.dll

    • Size

      241KB

    • MD5

      f62f6814c814b1edd41401c50135bcde

    • SHA1

      dbd994d95ca44d9f672149b3780b0ee32df3f404

    • SHA256

      6f060604bd162cadd83e75eeb0285056aa389bdacf1a4c906a81e63328ddd650

    • SHA512

      a2be347d3f2c6fb0c55bdc22b881450db9e3f1c7fdfcd47245122dcdfe7c77d923d36be6aadfccc4a6e327078e9f2d109d65cc7ddd4436a899dd61328f03cb35

    • SSDEEP

      6144:6245KU2DX/X1f6M5YmRbhpzpVCbj3iepPV1lcoMYp6IoZnYcvR+7RnwK:695KU2DX/X1fl5YmRbhpzpVCJPV1lcTk

    Score
    3/10
    • Target

      $PLUGINSDIR/ppp.dll

    • Size

      305KB

    • MD5

      19e50d2c1b3d9cb095508ba3edabf19d

    • SHA1

      ddaa2469659fe7c110bde2c93470d4b4ccceaa39

    • SHA256

      b75d1af08423e2987f90e734116e76bacfdea7632405df1b8f36af8f98d6a943

    • SHA512

      75666665a231a929eb535e5c6038d155828842725fbecfe03d43267ce540b805dadadf60d4cefeed27f98b7bdd266578a6353adcb2755133216116b3eb4e6876

    • SSDEEP

      6144:HYP8I4qtrSxR9RRnBMywPNVgMds+mUAZYIaT4cZJn:HY0I4uSxR9RRnnwPN3s+m+HBJn

    Score
    3/10
    • Target

      $PLUGINSDIR/sqlite3.dll

    • Size

      221KB

    • MD5

      dfc60b6676d0af6ea908be2c38e296a7

    • SHA1

      4295206a36365940d8b4af9eb66b0ac15a3b0938

    • SHA256

      1e144773525ce37e69a4ef522bf22a29c0b9f1a55f9dc194e49b5cb9675c3d4d

    • SHA512

      4210de93f29cb6e8e87d90488e83a8744c3e9d83ac83520ba07307d881953b466845fa6e59190afe6d48971c7c29c470306362169857efde95b7d042424c99b2

    • SSDEEP

      3072:PjGpZjFTcQODoxoxon1f8wL6rB8JBp2yF2+gcVgU3N9oAjAH3fHhCeVlLPF4dzIh:La6o1fPp2yvgEN9oTXfBCM5PSdUGa

    Score
    3/10
    • Target

      $PLUGINSDIR/time.dll

    • Size

      10KB

    • MD5

      38977533750fe69979b2c2ac801f96e6

    • SHA1

      74643c30cda909e649722ed0c7f267903558e92a

    • SHA256

      b4a95a455e53372c59f91bc1b5fb9e5c8e4a10a506fa04aaf7be27048b30ae35

    • SHA512

      e17069395ad4a17e24f7cd3c532670d40244bd5ae3887c82e3b2e4a68c250cd55e2d8b329d6ff0e2d758955ab7470534e6307779e49fe331c1fd2242ea73fd53

    • SSDEEP

      192:oNcwTweFbs9t2n2Sgiga65/aHdaGZavaJIYX4Hw2:oNcwBFg22SEw47CPU

    Score
    3/10
    • Target

      $PLUGINSDIR/uilib.dll

    • Size

      680KB

    • MD5

      aff1a930d109f758a4bab03930963dfb

    • SHA1

      864acf405c4617c922b328490e7ed2d6379de59d

    • SHA256

      5baea08c387595bff9b644c381c6108f6d436ac13ce47fce67c2803adbc87952

    • SHA512

      24ef00b2dec273f72afaa828604608acee404458750993ab84cece971b095e5008ad29a930cf57659e9f05df6399fdacdf20fdc1e9438f12b7fb09a331fb750b

    • SSDEEP

      12288:yJ7JrzL7XGxZzOa4nFbwyKLrpapsWDpzG8sIRxA3tV2tjStKbM9KKiTTwiKkPqYv:ek2sWzz4tV2FS4bFhTWIB6a

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

bootkitdiscoverypersistence
Score
6/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10