Overview

overview

7

Static

static

3

b4ea054820...18.exe

windows7-x64

7

b4ea054820...18.exe

windows10-2004-x64

7

$PLUGINSDIR/inst.exe

windows7-x64

1

$PLUGINSDIR/inst.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4ea054820866172ee3039a5dc198798_JaffaCakes118

  • Size

    186KB

  • Sample

    241130-frd8fstngx

  • MD5

    b4ea054820866172ee3039a5dc198798

  • SHA1

    187b7c88a91cf74e5bd7d398467acf73378a04c9

  • SHA256

    e3f4116c5aa5ff97bfca9658b52d02efd541a8b969f4325e0b77577fed9288a5

  • SHA512

    fc55a07876fd8d7470fdbc7d0bffd1a2fb7821826b810df30c712b75f1510e169f5b70ace90882d8e08acb748138f92975bfe305af7fb138671b4f946c91f38a

  • SSDEEP

    3072:LX7DItrfaocyTgfsqQOlJSTCVsdDnjod6BeysyGTqgMNIGKWzlvrQPIKbfTw+56z:LsaocyLCSuVO/Y6+y6F2IGxzlvr9UrIz

Score
7/10
discovery

Malware Config

Targets

    • Target

      b4ea054820866172ee3039a5dc198798_JaffaCakes118

    • Size

      186KB

    • MD5

      b4ea054820866172ee3039a5dc198798

    • SHA1

      187b7c88a91cf74e5bd7d398467acf73378a04c9

    • SHA256

      e3f4116c5aa5ff97bfca9658b52d02efd541a8b969f4325e0b77577fed9288a5

    • SHA512

      fc55a07876fd8d7470fdbc7d0bffd1a2fb7821826b810df30c712b75f1510e169f5b70ace90882d8e08acb748138f92975bfe305af7fb138671b4f946c91f38a

    • SSDEEP

      3072:LX7DItrfaocyTgfsqQOlJSTCVsdDnjod6BeysyGTqgMNIGKWzlvrQPIKbfTw+56z:LsaocyLCSuVO/Y6+y6F2IGxzlvr9UrIz

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/inst.exe

    • Size

      144KB

    • MD5

      6c13897aac76495646cb21a0f3026459

    • SHA1

      3b852f19dfe1efc220356abce7b99a491cc44e3a

    • SHA256

      174d6c4705673cfbd506f0cb916a766dd4e1a45f3ba1b124d4cda16fcd66582c

    • SHA512

      93ca87000dc1ec560f153da999f7489b3a856ded0653e981667bc5a2af7f4f4a886a3f982c6e2db05351668bf8fc20f80d8a27591e49f4d9bc20a11a260d8051

    • SSDEEP

      3072:XNULNkFGYmCVWQcxepmq+85MBH4gs/lgDaoOjSA9j1R6jJ0qZ:XJF7mCEkZEZa/1oOjSAkt0U

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks