Overview

overview

10

Static

static

10

JaffaCakes...a1.exe

windows7-x64

7

JaffaCakes...a1.exe

windows10-2004-x64

7

$PLUGINSDI...ol.dll

windows7-x64

3

$PLUGINSDI...ol.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$R0.dll

windows7-x64

3

$R0.dll

windows10-2004-x64

3

DARF32CB.dll

windows7-x64

3

DARF32CB.dll

windows10-2004-x64

3

SicalcAA.exe

windows7-x64

3

SicalcAA.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_61758371dbe512b89ea13737f67bc5a1

  • Size

    1.8MB

  • Sample

    250107-n4t4fasjfl

  • MD5

    61758371dbe512b89ea13737f67bc5a1

  • SHA1

    63afbd2291488172c6d8176f4261cae278a9cbce

  • SHA256

    b012918f1665341591305c28869478e58fb32f45f7a410a0f79cf42148c29e20

  • SHA512

    2b92da0b2a57aeae7c44d693bb1709161ded238a560d85ef42d6a6667bbc30cd1e4c9d484e5ffdf45c69f8e8cd42acd8772f11988fff286aa39e42c80f66eae5

  • SSDEEP

    49152:BupKPb+4IIkTSEnS1wesSkmtfvewf3DwvFSnb:EKD+4IIkmYResSkmtf/f30vFe

Score
10/10
neshtadiscovery

Malware Config

Targets

    • Target

      JaffaCakes118_61758371dbe512b89ea13737f67bc5a1

    • Size

      1.8MB

    • MD5

      61758371dbe512b89ea13737f67bc5a1

    • SHA1

      63afbd2291488172c6d8176f4261cae278a9cbce

    • SHA256

      b012918f1665341591305c28869478e58fb32f45f7a410a0f79cf42148c29e20

    • SHA512

      2b92da0b2a57aeae7c44d693bb1709161ded238a560d85ef42d6a6667bbc30cd1e4c9d484e5ffdf45c69f8e8cd42acd8772f11988fff286aa39e42c80f66eae5

    • SSDEEP

      49152:BupKPb+4IIkTSEnS1wesSkmtfvewf3DwvFSnb:EKD+4IIkmYResSkmtf/f30vFe

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/AccessControl.dll

    • Size

      13KB

    • MD5

      9e7d36edcc188e166dee9552017ac94f

    • SHA1

      0378843fe1e7fb2ad97b8432fbdcb44faa6fc48a

    • SHA256

      d52a83c2a8551cebf48ff7a8d5930be1873bce990f855ccab4d7479cfeb22e3d

    • SHA512

      92c31355cd124ba28c0ff9aa8fa34d5db9db0b093edb8978bc3cf94e1f72d526603d5d5c1e221dcb2ac6648bc420f4df9847c2b1e71046384d827814a77d1783

    • SSDEEP

      192:y26NwF1FF8GqdxASZlSOnNGGPCqLXUdadWo2FfTCWWqDsYjGI5hBslft8gWNPjQo:I+8vwSZlgaJ3/4/4Q/bN

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/StartMenu.dll

    • Size

      7KB

    • MD5

      a4173b381625f9f12aadb4e1cdaefdb8

    • SHA1

      cf1680c2bc970d5675adbf5e89292a97e6724713

    • SHA256

      7755ff2707ca19344d489a5acec02d9e310425fa6e100d2f13025761676b875b

    • SHA512

      fcac79d42862da6bdd3ecad9d887a975cdff2301a8322f321be58f754a26b27077b452faa4751bbd09cd3371b4afce65255fbbb443e2c93dd2cba0ba652f4a82

    • SSDEEP

      96:2fiqP7bO2qHkAC40KhvSE+6nrxtMn0iGd88qRLqtJ1tbRhElfRx2:siqP7OHX1Q4xtcf8qo/ttgfRx2

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      c17103ae9072a06da581dec998343fc1

    • SHA1

      b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

    • SHA256

      dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

    • SHA512

      d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      c10e04dd4ad4277d5adc951bb331c777

    • SHA1

      b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

    • SHA256

      e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

    • SHA512

      853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

    • SSDEEP

      96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $R0

    • Size

      1.8MB

    • MD5

      61620b28817d0be71d626ffb6f401253

    • SHA1

      646a930404f3befe1fdc41d8df62979cc85d0e25

    • SHA256

      6148fe767e83d00680cab5663eb0e6658c9d924b2769eea41e834226c90aea3e

    • SHA512

      b118891cfce6243414113e12a5dfc39af6bccf79547ef025089561fea71572f7bf37493a94df6e1c24204de91577d457ca9634caef15d32f62ed802486970e98

    • SSDEEP

      12288:pHdWrc5YGamzFjY7DY0Gf5oD2EmLreS1MhfV8g3tnlpJb2XgQlf+ZNAY23A/xNZt:tdWruqb7tclXpc

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      DARF32CB.DLL

    • Size

      132KB

    • MD5

      b1897a6e8ce670483c568ef2d44690d0

    • SHA1

      5e25afba6d4f7b2f45da0bc91c8b5c821013a8b2

    • SHA256

      16c37cd7a01698940b0f501588dcca2fa37c36b88640c6e1dcd8083ada297031

    • SHA512

      fbc488a890bccf8682749bec38e2a9b26d03506341ee4048a6c32ceb4fe9485ef7aff7ed4fd225996413e9713872ebde31a9fc0c895d4b1eb186e79420ad9bda

    • SSDEEP

      1536:5+pRG5qxIu5udYF8Lrkj17lJo8Gf6EIf6zyDGtxbjw0NR:Gz1uWFZJop6EIfOyDqTR

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      SicalcAA.exe

    • Size

      2.0MB

    • MD5

      7de12393a88dedd06d7b6e268ac09297

    • SHA1

      cbca580769eba1188e81c2920dff3f01ee52e0d5

    • SHA256

      41df51035e69a195061192da4a031f2f9e02378e9ed2a97bc53f80af494dfacb

    • SHA512

      3091119843f182062afad015f5cad9571b0faa4612d6c47d107b3e9500027292d036b72467c6e2f6e4ee9e1e35d589c8a322a4aeee686a5522d2938c89213f69

    • SSDEEP

      49152:DkfWsIgI8IgIb2dXfI5nRDpV7fIGch52lFfiNqA:DkRIgI8IgIb2dXfIpRDpV7fIGch52lFX

    Score
    3/10
    discovery
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks