Overview

overview

7

Static

static

3

b4f1ee103a...18.exe

windows7-x64

7

b4f1ee103a...18.exe

windows10-2004-x64

7

$PLUGINSDIR/inst.exe

windows7-x64

1

$PLUGINSDIR/inst.exe

windows10-2004-x64

6

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4f1ee103a1070c46c9c78febc55ba64_JaffaCakes118

  • Size

    186KB

  • Sample

    241130-fygxxsyncq

  • MD5

    b4f1ee103a1070c46c9c78febc55ba64

  • SHA1

    aa2a93d2b3b1895e2d986558765c00138f8285f5

  • SHA256

    9a5c8059ec18e44315dc37de60f273540a139953cc40b24029d34527489207c2

  • SHA512

    b4d8148bf28a0a95d03737337666d0c8749ed6bf52953be313beddbfcf0cbfcd4d937a256e6c6dfbbd22325e052d484caa670c2e1bbcae9d6ee951885626ccff

  • SSDEEP

    3072:8X7DItrfaocyTgfsqQOlJing+uC+7OuwPIhPgvVckBIK5/H7jOqEN/e55Zybm:8saocyLCinxX+6um3lbST8vZybm

Score
7/10
discovery

Malware Config

Targets

    • Target

      b4f1ee103a1070c46c9c78febc55ba64_JaffaCakes118

    • Size

      186KB

    • MD5

      b4f1ee103a1070c46c9c78febc55ba64

    • SHA1

      aa2a93d2b3b1895e2d986558765c00138f8285f5

    • SHA256

      9a5c8059ec18e44315dc37de60f273540a139953cc40b24029d34527489207c2

    • SHA512

      b4d8148bf28a0a95d03737337666d0c8749ed6bf52953be313beddbfcf0cbfcd4d937a256e6c6dfbbd22325e052d484caa670c2e1bbcae9d6ee951885626ccff

    • SSDEEP

      3072:8X7DItrfaocyTgfsqQOlJing+uC+7OuwPIhPgvVckBIK5/H7jOqEN/e55Zybm:8saocyLCinxX+6um3lbST8vZybm

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/inst.exe

    • Size

      144KB

    • MD5

      6c13897aac76495646cb21a0f3026459

    • SHA1

      3b852f19dfe1efc220356abce7b99a491cc44e3a

    • SHA256

      174d6c4705673cfbd506f0cb916a766dd4e1a45f3ba1b124d4cda16fcd66582c

    • SHA512

      93ca87000dc1ec560f153da999f7489b3a856ded0653e981667bc5a2af7f4f4a886a3f982c6e2db05351668bf8fc20f80d8a27591e49f4d9bc20a11a260d8051

    • SSDEEP

      3072:XNULNkFGYmCVWQcxepmq+85MBH4gs/lgDaoOjSA9j1R6jJ0qZ:XJF7mCEkZEZa/1oOjSAkt0U

    Score
    6/10

    • Drops desktop.ini file(s)

    behavioral3behavioral4

    • Target

      $PLUGINSDIR/nsExec.dll

    • Size

      8KB

    • MD5

      249ae678f0dac4c625c6de6aca53823a

    • SHA1

      6ac2b9e90e8445fed4c45c5dbf2d0227cd3b5201

    • SHA256

      7298024a36310b7c4c112be87b61b62a0b1be493e2d5252a19e5e976daf674ce

    • SHA512

      66e4081a40f3191bf28b810cf8411cb3c8c3e3ec5943e18d6672414fb5e7b4364f862cba44c9115c599ac90890ef02a773e254e7c979e930946bc52b0693aad7

    • SSDEEP

      192:r/QeHNWSvUTfWdXw08LYKFaynLb3MRlbOVlR:7jBvwudT8LJxnnMRlyVlR

    Score
    3/10
    discovery
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks