e7e1de5c01ce0f5a7c4849e97ed38e2250dbb7bdb6859f0bd508546b2b22b091

Sharing

Copy URL Twitter E-mail

General

Target

f6e3534d4b6925a02d8ae9ef9d0a5366_JaffaCakes118
Size

4.4MB
Sample

240418-al1xdabf56
MD5

f6e3534d4b6925a02d8ae9ef9d0a5366
SHA1

8f92a281482c2aee4405203b4b1c0521f3e459d6
SHA256

e7e1de5c01ce0f5a7c4849e97ed38e2250dbb7bdb6859f0bd508546b2b22b091
SHA512

4c9f208daab7560fd299bd4a2083f7a0868a02977b8ef42ca83185141c0746f8039abb7b0141e58ae1b3acd26326ff7e6f6f5325c50e44586c6f1324069a3698
SSDEEP

98304:MgiJMQBR6hSE6RMMmE5rHjRhrSmvltsygVz4bqJIYryaMcAClHq:9iJMbSJMfE5ZNWygt4b4JMmg

Score

7^/10

Malware Config

Targets

- Target
  
  f6e3534d4b6925a02d8ae9ef9d0a5366_JaffaCakes118
- Size
  
  4.4MB
- MD5
  
  f6e3534d4b6925a02d8ae9ef9d0a5366
- SHA1
  
  8f92a281482c2aee4405203b4b1c0521f3e459d6
- SHA256
  
  e7e1de5c01ce0f5a7c4849e97ed38e2250dbb7bdb6859f0bd508546b2b22b091
- SHA512
  
  4c9f208daab7560fd299bd4a2083f7a0868a02977b8ef42ca83185141c0746f8039abb7b0141e58ae1b3acd26326ff7e6f6f5325c50e44586c6f1324069a3698
- SSDEEP
  
  98304:MgiJMQBR6hSE6RMMmE5rHjRhrSmvltsygVz4bqJIYryaMcAClHq:9iJMbSJMfE5ZNWygt4b4JMmg
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/ExecCmd.dll
- Size
  
  4KB
- MD5
  
  b9380b0bea8854fd9f93cc1fda0dfeac
- SHA1
  
  edb8d58074e098f7b5f0d158abedc7fc53638618
- SHA256
  
  1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
- SHA512
  
  45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
- SSDEEP
  
  48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/ExecDos.dll
- Size
  
  5KB
- MD5
  
  a7cd6206240484c8436c66afb12bdfbf
- SHA1
  
  0bb3e24a7eb0a9e5a8eae06b1c6e7551a7ec9919
- SHA256
  
  69ac56d2fdf3c71b766d3cc49b33b36f1287cc2503310811017467dfcb455926
- SHA512
  
  b9ee7803301e50a8ec20ab3f87eb9e509ea24d11a69e90005f30c1666acc4ed0a208bd56e372e2e5c6a6d901d45f04a12427303d74761983593d10b344c79904
- SSDEEP
  
  48:6jOBtU/BXN8kUByyy/Aklkcrkyg7Vg5RibGoTCTo0gqVeeaeQqzM5rv774YRljmB:y/DMy4ncrkyg7tbpQFLUEYRxe
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/FindProcDLL.dll
- Size
  
  31KB
- MD5
  
  83cd62eab980e3d64c131799608c8371
- SHA1
  
  5b57a6842a154997e31fab573c5754b358f5dd1c
- SHA256
  
  a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294
- SHA512
  
  91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9
- SSDEEP
  
  384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  12KB
- MD5
  
  1d5c649dde35003a618b9679d5d71b92
- SHA1
  
  0409bbab3ab34f8c01289cdd847b4d1a32d05b18
- SHA256
  
  0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f
- SHA512
  
  b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9
- SSDEEP
  
  384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  32KB
- MD5
  
  83142eac84475f4ca889c73f10d9c179
- SHA1
  
  dbe43c0de8ef881466bd74861b2e5b17598b5ce8
- SHA256
  
  ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
- SHA512
  
  1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
- SSDEEP
  
  384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  12KB
- MD5
  
  a10c9c9f5474ed8c13ff5e182655eb9f
- SHA1
  
  ffa6073f6b1724183d570c368c3025430de1ee33
- SHA256
  
  17055e463a04435bdb5fea5d634af12a4678ff5d680196da230879ad24622ee3
- SHA512
  
  bd7222d4ee6516b9be7f498858812ebfa824f657ef5298cfc813ad91fdfb6129642232d4c47f2edc4c2b8d2619ba7530a5195d53e9017435e7e8ef742f60fdb5
- SSDEEP
  
  192:ATPN9E1B0OUrW7VymsS9WmaYqkzJqa5Maamy6J0WVpzuzzPzrR2Z+:ATzEbUrW9tWmaY/zJ+aFy6CWVUzDP8
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  10KB
- MD5
  
  4eff5fafd746f5decb93a44e3a3d570c
- SHA1
  
  a11aa7681b7e2df1c7f7492a127d332d1495ea8a
- SHA256
  
  cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
- SHA512
  
  cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
- SSDEEP
  
  192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/md5dll.dll
- Size
  
  8KB
- MD5
  
  a7d710e78711d5ab90e4792763241754
- SHA1
  
  f31cecd926c5d497aba163a17b75975ec34beb13
- SHA256
  
  9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2
- SHA512
  
  f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0
- SSDEEP
  
  96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV
Score

3^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/nsisXML.dll
- Size
  
  11KB
- MD5
  
  13deb9a0f4e4286df01abc85e1895e09
- SHA1
  
  3174853b32407fd85220de844b390a18a8a76c97
- SHA256
  
  c40ef0b41c035b6d29656616ddc113a717bfd1bb78c9fcac75d7b6eefdc7bf83
- SHA512
  
  604aa82a9c4818d2f63fb11bbde561afc137a77e9f3108dfd7f4596524e46ce71b6dc31606bce534b600b250c3b4092a311fd1eced83da01156d5bcfaad7aade
- SSDEEP
  
  192:GRTSl/ex70OJp3U5WtRqRLnOyhb6hz801Sux3ulXhDQR:GRTSl/kfzWIRqRLnOy3mxaX1E
Score

3^/10
behavioral19 behavioral20
- Target
  
  $TEMP/Dump.dll
- Size
  
  184KB
- MD5
  
  77eef36b98e229f84b8b9a0b181bab19
- SHA1
  
  88c58e475d9f7e03813c968bc2c92592d6211131
- SHA256
  
  a7d2d374d37f50b616ca8a26c1d69be119143dd7fbcecb065e9986c3c42d6e83
- SHA512
  
  6b745c34565bec1104d3a280681ce51c2fb7c6d945cb851629ec291017a2013eb377f873a3794dfc882c0008b898d28314f07662d433d96580c297d29b2f1228
- SSDEEP
  
  3072:I/cQfc7tRwG/q4FXyVUrlt4VsnFegMclfT2gK9FS54hJi:UcQfcYG/q2yVUZt9JtKX
Score

3^/10
behavioral21 behavioral22
- Target
  
  $TEMP/getmacaddress.dll
- Size
  
  180KB
- MD5
  
  aa6ec20e0199fa1cb2c23fd529bf9330
- SHA1
  
  f333f36e61c2d183144303a0d054846a29083295
- SHA256
  
  a5940ae3c99f0e89525ebf151c8577e2dcc8e81947ff7f8f68180c4044d82512
- SHA512
  
  0fcaa6f3fe978b3c6bceeabed6fdea65d2ab11127f6e387ea82f433a0530c9c2a5589460e68a4ee4be2a6e097e272ba86fb4133f0b22ad5d7dd1cad75a918e30
- SSDEEP
  
  3072:QQU4+QPcSfGK/u8mIfXDxpaugxXVlQVKi5UfUFPJHWd8y:QQUjw9m56zxUrxFDvQs
Score

1^/10
behavioral23 behavioral24
- Target
  
  $TEMP/xml2fspdata.exe
- Size
  
  124KB
- MD5
  
  a6e48c17d6b8039c6d17d4b05b41e9dd
- SHA1
  
  4dd75090cc72dec6f2f1253da605c36336779a17
- SHA256
  
  799026e18abc09eba687f7c7eb81b51ab15594ed0066cf6a9a16edb79ae7f209
- SHA512
  
  cb2c0ac632789faf71c214bff4ee5c853cd2f0b5fabab65140e05db97ee5d0ea5c5872304845f273ade0f71345b219eaeb72603b960efb4dd43dd96f29a7be13
- SSDEEP
  
  1536:e2aGwaba+SxEJM9lg4hKNFgroLpvBzrhbWpia76PuApfCY3u65ueQ:e2aGwabaHr9lg4gpLpDbVT2Y3V5ux
Score

1^/10
behavioral25 behavioral26
- Target
  
  CoreAAC.ax
- Size
  
  592KB
- MD5
  
  6636fd123e77073c1a07d1ec0831334c
- SHA1
  
  39ea6f28d5b30675760f29df68160a81d5df349e
- SHA256
  
  e85c1802ae3c7af9b7967ceadaf0504823f092abba04ba912576edbfd421e76a
- SHA512
  
  3ac59d1ad36eb1c052c272a11c6dd78dbebb5061b8b79a2a1f0108f8208be7fb9cc8e6208124b12c779e2bdc845882cfd432a84427e2c5c312c4d3275b054849
- SSDEEP
  
  12288:8rXUXLyZqsQoK2AyPaGJuVpk+v9LybKslc9OyGs2+eD:SUX4K2kGJMpkwLyllA7l2
Score

1^/10
behavioral27 behavioral28
- Target
  
  CrashReport.exe
- Size
  
  176KB
- MD5
  
  4f93eef40e320fd5dce589ad6f76f337
- SHA1
  
  8f1c1b774da73b5cd23f0bf9016ec1924426c9fa
- SHA256
  
  3667285987d5b89e06653d9ead7aa1fde153fb1e31dd654863d4281608c989c6
- SHA512
  
  db9dcd7e7a63a0a053fe9ca1c220171b54577fee31a94e748cb425f5347475746772b8af90d299cc3f27f56dad172430b9e1cc4684328d5892c512ca53e7e2e9
- SSDEEP
  
  3072:ZBmJ7ZVWiKNPurOBTikcTBfQPIcF5x51WuJ:Zs77WnNPiOJcTB4PIcZx
Score

1^/10
behavioral29 behavioral30
- Target
  
  Dump.dll
- Size
  
  184KB
- MD5
  
  77eef36b98e229f84b8b9a0b181bab19
- SHA1
  
  88c58e475d9f7e03813c968bc2c92592d6211131
- SHA256
  
  a7d2d374d37f50b616ca8a26c1d69be119143dd7fbcecb065e9986c3c42d6e83
- SHA512
  
  6b745c34565bec1104d3a280681ce51c2fb7c6d945cb851629ec291017a2013eb377f873a3794dfc882c0008b898d28314f07662d433d96580c297d29b2f1228
- SSDEEP
  
  3072:I/cQfc7tRwG/q4FXyVUrlt4VsnFegMclfT2gK9FS54hJi:UcQfcYG/q2yVUZt9JtKX
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32