051f6581fe2e82e5e0a8c7d387b75aa51911af1560570dca42bb7470d524ad1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5209468b3dc2a9f24010a7c75cc019_JaffaCakes118
Size

339KB
Sample

240409-s1k4ksed3t
MD5

ea5209468b3dc2a9f24010a7c75cc019
SHA1

36a2de5fe8379b77d520fb4f5d35d133e27eb68c
SHA256

051f6581fe2e82e5e0a8c7d387b75aa51911af1560570dca42bb7470d524ad1b
SHA512

d2df513a0da3d083e62bb17dbc5c189b835e630c1c2597f2db3cfe443a3d49ae61a6f5ecfbd6ed480f9c72ebb059724c8eb99bebf82865dc241a95dcda117f85
SSDEEP

6144:9bUTp1WPeryXlpnt8Q+KaVM+eB6KEzRa3pPBkNn95huX6V7RnXh49Kj:9IRryXznt87zQcbR1Z9TuX6HX0Kj

Score

7^/10

Malware Config

Targets

- Target
  
  ea5209468b3dc2a9f24010a7c75cc019_JaffaCakes118
- Size
  
  339KB
- MD5
  
  ea5209468b3dc2a9f24010a7c75cc019
- SHA1
  
  36a2de5fe8379b77d520fb4f5d35d133e27eb68c
- SHA256
  
  051f6581fe2e82e5e0a8c7d387b75aa51911af1560570dca42bb7470d524ad1b
- SHA512
  
  d2df513a0da3d083e62bb17dbc5c189b835e630c1c2597f2db3cfe443a3d49ae61a6f5ecfbd6ed480f9c72ebb059724c8eb99bebf82865dc241a95dcda117f85
- SSDEEP
  
  6144:9bUTp1WPeryXlpnt8Q+KaVM+eB6KEzRa3pPBkNn95huX6V7RnXh49Kj:9IRryXznt87zQcbR1Z9TuX6HX0Kj
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  7399323923e3946fe9140132ac388132
- SHA1
  
  728257d06c452449b1241769b459f091aabcffc5
- SHA256
  
  5a1c20a3e2e2eb182976977669f2c5d9f3104477e98f74d69d2434e79b92fdc3
- SHA512
  
  d6f28ba761351f374ae007c780be27758aea7b9f998e2a88a542eede459d18700adffe71abcb52b8a8c00695efb7ccc280175b5eeb57ca9a645542edfabb64f1
- SSDEEP
  
  192:eF2HS5ih/7i00dWz9T7PH6lOFcQMI5+Vw+bPFomi7dJWsP:rSUmlw9T7DmnI5+N273FP
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/TBC.dll
- Size
  
  94KB
- MD5
  
  ec0281fd243bffbfe3cf1558e99b51fc
- SHA1
  
  2841c1e42a06d618db54dedc9a5aee48c1c9869a
- SHA256
  
  902ce26a56b68e18f4360c7b6a3221757377af06e9125bdaeed8f1290d999659
- SHA512
  
  a117af91d786ef824f0b0f978cbc15ebc098f6b57481888d97f0ce503ce39e4a6312cd51ffe32625cbe8c4d019f5b40a4d796608c22eeb95d97150c57080d99c
- SSDEEP
  
  1536:ahu/kdI2gfoH4wL5T/WFxQG68gK4T765JXffhi4HUOk1m59bd9tgvpk:l+gwYET/sE7oXffhkmvbd9tgvpk
Score

1^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  156KB
- MD5
  
  879ef35b34de9a94762cb32d26ae0db5
- SHA1
  
  a9754a70d9456d7b4292a67d44ccf53757ed70ce
- SHA256
  
  51480849fec0b57b872a9bf6992f8c98e6ceb79b318b09a48347f6d3e0bc416f
- SHA512
  
  9b373b04fdeef8b9f1cbdd7bf412990422497e437ae6fd0bcbe8ae7f8cf343161f4be200b3207960884c09558175157764f9af688c0cac53119db3ceff980ee2
- SSDEEP
  
  3072:DJ3K1vSVKhaXpxVdDRpwSCPRzdcc6rleG5Y0z60g6Z9xl1Wfli8gZC:XVd9gPRzw15Y0Zg6Z9xl1WflCc
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/t8bprtct.dll
- Size
  
  111KB
- MD5
  
  2b40cbb5201faf87518a156defc44a00
- SHA1
  
  b549bc9a5523a316a84f6b2cfa4e71692759d8a9
- SHA256
  
  e8363eb95c7899dd3c975e3b237ee80c7aad66a784d2f4010e8cf449264bc147
- SHA512
  
  e7dda33cb42b324c842176075e552b731344c8da2c92bf277ba58cb6e59eead2b989d5fe02f0c92363dd2a66d04478dcb8cf4db7836d1bcb4c4610d25a98709d
- SSDEEP
  
  1536:ME1QJDa89g9VLY2sTmdgiB+lzgldVEVQwk7vuFMLUHLFVtptIzWR:Mswe8YXsTq+lzm+VQ7umoLFVtDoWR
Score

1^/10
behavioral10 behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10