Overview

overview

5

Static

static

5

JaffaCakes...91.exe

windows7-x64

5

JaffaCakes...91.exe

windows10-2004-x64

5

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...sk.dll

windows7-x64

3

$PLUGINSDI...sk.dll

windows10-2004-x64

3

jpdesk.exe

windows7-x64

jpdesk.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e2c41e7f6580b34ba28b96b3fc435391

  • Size

    505KB

  • Sample

    250120-laeqjsslbs

  • MD5

    e2c41e7f6580b34ba28b96b3fc435391

  • SHA1

    a1e58efad60e5494935a7dfc9f4af12cde4da1a6

  • SHA256

    7807314d2d139e8c8f186eda97d6c6c9c03abeafc2b62799e2a516dd7205cca9

  • SHA512

    f95f683c05c666e6e048d1634a97c97cacf3c8bb3dec12cf19905dff08ef74f34617e4c0938920dbda5aa478e71a0700941b42aeb41c96f1425829b2e512ad28

  • SSDEEP

    12288:Ew1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFKv4BtfjmMqwHMnVpz7ss9iB:Ew1dILPAX8ln6aB4WP3E29V8S4Dhg0fc

Score
5/10
discoveryupx

Malware Config

Targets

    • Target

      JaffaCakes118_e2c41e7f6580b34ba28b96b3fc435391

    • Size

      505KB

    • MD5

      e2c41e7f6580b34ba28b96b3fc435391

    • SHA1

      a1e58efad60e5494935a7dfc9f4af12cde4da1a6

    • SHA256

      7807314d2d139e8c8f186eda97d6c6c9c03abeafc2b62799e2a516dd7205cca9

    • SHA512

      f95f683c05c666e6e048d1634a97c97cacf3c8bb3dec12cf19905dff08ef74f34617e4c0938920dbda5aa478e71a0700941b42aeb41c96f1425829b2e512ad28

    • SSDEEP

      12288:Ew1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFKv4BtfjmMqwHMnVpz7ss9iB:Ew1dILPAX8ln6aB4WP3E29V8S4Dhg0fc

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      32KB

    • MD5

      83142eac84475f4ca889c73f10d9c179

    • SHA1

      dbe43c0de8ef881466bd74861b2e5b17598b5ce8

    • SHA256

      ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729

    • SHA512

      1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1

    • SSDEEP

      384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      ab73c0c2a23f913eabdc4cb24b75cbad

    • SHA1

      6569d2863d54c88dcf57c843fc310f6d9571a41e

    • SHA256

      3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457

    • SHA512

      99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8

    • SSDEEP

      96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsWebJPDesk.dll

    • Size

      301KB

    • MD5

      1fda2443aef2f3852ccf37a7c7056b65

    • SHA1

      afbe7eee647c887718963c38f38c0f0ff1766694

    • SHA256

      dd5e4cbb5c87bff86faa92a4fb1c0c8cca2edf235c7ce672d051f2d1b8389467

    • SHA512

      953f981beee1bd39efe0f7b525f49afa004d003a8159d4615513d3bc3e5bae48beb6e24c515d1c200b3340cd1cd15bc51a734d1ded986be41e41d5f36bee9a26

    • SSDEEP

      3072:sz28IH4In1NPxwGZ+hkqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5vbjz:szuYa1I3kqdKcS0Hwjl2Jw

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      jpdesk.exe

    • Size

      244KB

    • MD5

      0407b1078aba6d6275accf5e53c7d03e

    • SHA1

      c57b4b4af43fe8040fda7ffcc2e1c9b7bded110d

    • SHA256

      769681e6ba4b85e8e8ba401fefba353692e039d11152ba95c2a150e9d1b6cc46

    • SHA512

      c0d483cadb18b961796b72c2e115274ad785fdca917dc5a9b4a8265df7e72439556554f690390a64c23e1f0fd5a8fcb5493d23491270e9b70d4ae4d0b1cb9aaa

    • SSDEEP

      6144:Te/BXYw6uyBwBJQj+CCbF8nabP4N8B2DCoL+I4B+Kk:Te/V6uKUJQyMnEP4N8B2Rsg

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks