2c9d3c3fcad007db72e0cc0025e15608929aca79fb4a3ba1cff079661050fd5f

Sharing

Copy URL

Twitter E-mail

General

Target

fb9bee14f48e56034346f183212e9186_JaffaCakes118
Size

1.4MB
Sample

240420-brv4racg23
MD5

fb9bee14f48e56034346f183212e9186
SHA1

9cb592d18a76744be9269e0d5a8ab1cbcff7776a
SHA256

2c9d3c3fcad007db72e0cc0025e15608929aca79fb4a3ba1cff079661050fd5f
SHA512

ccc18fd3c0ec82312cdfb4eca6c962717a6d96752c993544ecedb747608b32908169aec030b72aa111d9b1293cd70f27fb7eefb37d8e62a47c13c5505469e934
SSDEEP

24576:AnA59IdzZDYhXu2bOQhq1wPoGcURyWt9jPCGekLvJDdegUJ0/VlnPW9mb6bN+0qe:AnfdlD/2Dhq1I9wWndJZdeB0/VVPWC6j

Score

7^/10

Malware Config

Targets

- Target
  
  fb9bee14f48e56034346f183212e9186_JaffaCakes118
- Size
  
  1.4MB
- MD5
  
  fb9bee14f48e56034346f183212e9186
- SHA1
  
  9cb592d18a76744be9269e0d5a8ab1cbcff7776a
- SHA256
  
  2c9d3c3fcad007db72e0cc0025e15608929aca79fb4a3ba1cff079661050fd5f
- SHA512
  
  ccc18fd3c0ec82312cdfb4eca6c962717a6d96752c993544ecedb747608b32908169aec030b72aa111d9b1293cd70f27fb7eefb37d8e62a47c13c5505469e934
- SSDEEP
  
  24576:AnA59IdzZDYhXu2bOQhq1wPoGcURyWt9jPCGekLvJDdegUJ0/VlnPW9mb6bN+0qe:AnfdlD/2Dhq1I9wWndJZdeB0/VVPWC6j
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/ChkClient.dll
- Size
  
  140KB
- MD5
  
  3fe47e461bb686693cf440c8815f2a0b
- SHA1
  
  9a7d27d47a542b83d00f1e6027ba4c22d496f887
- SHA256
  
  5bdefe9a081e5e2f4af73891db6228a6b57e7dd320fac0ae233f5cd741db8a1f
- SHA512
  
  687c57e17c4f527b90e8eafa9929fa9ee0a1fa82b2c9ba9c6a6385cfcb1fcdd1e09305acbf357cf61e7dd7e061d581a378d2661ed7df7dbfd554514f04646e61
- SSDEEP
  
  1536:Ic+9HlMqT+GbwVG7MPHFdufRxYj3fnN8smruI6qlCMQwIZ7:ITM9VBPHFsrOPN70bHlcwG7
Score

1^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/DLLWaitForKillProgram.dll
- Size
  
  28KB
- MD5
  
  9c4b8ec42d89f7557bfd90798ce52787
- SHA1
  
  2376dde426ea65aa27c30e304086310605382475
- SHA256
  
  ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
- SHA512
  
  17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
- SSDEEP
  
  96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/DLLWebCount_new.dll
- Size
  
  28KB
- MD5
  
  f16f5feebd9b431a8bc63456c0ad267c
- SHA1
  
  acc75cfa3ed7888334aa2ccf305a6c6c58a08aaf
- SHA256
  
  5417af0fc8284e9745650a55803bb34217e314096dc7cedf113c960624ae08ad
- SHA512
  
  ed1e62d903b511a29abd5def4419b5afa63699ee2d1c91a9d884ffb01d7debe5981559574cac4885140d1f27f4275be56236f5c6f1c327147dcac8893f965512
- SSDEEP
  
  96:3YP18J49uJPeaFX/0gOtJ/9nMjbnbk2Zl1bU6i9vtmAuSBudGaTA:3f1bFX/rOtJ/lMvbfJU6snpYdb
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/IEFunctions.dll
- Size
  
  3KB
- MD5
  
  9701818d39318145dd164794ef3a3846
- SHA1
  
  7db701f8dc19163d46ba88e8b68d8dbf428a8152
- SHA256
  
  3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a
- SHA512
  
  d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4
Score

1^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  eef9e469e8a30717974499f277d97e2a
- SHA1
  
  2d33c25984ebd9116beeb55cdde4c5c86c023e5d
- SHA256
  
  1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
- SHA512
  
  d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
- SSDEEP
  
  192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/IsVista.dll
- Size
  
  44KB
- MD5
  
  344d13fd0fdd2d97e8d61960f40a8a30
- SHA1
  
  3f0f120203005eea3e8ed1652a6ea8a607ea934d
- SHA256
  
  17bb3331e2300aa01666fbee98b9552cec5e46212a4c5a340c0370b93df88f83
- SHA512
  
  b4e49c58503532e270cc369f1cbd14d85edd46da5ab034dad730bd4297887dd541d445d2fbf205820e6afbbdba7ab6d5b78b694467554320fd6db8e06fe4f719
- SSDEEP
  
  384:x4MHyTfkIbqaddF1qabhJfl7Tisz7c7t3TyAvdjWu875USXdvlHZYklIsg:FSTpbqaLfHJflCszOTbdjWR3Nvl
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/Ischeck.dll
- Size
  
  120KB
- MD5
  
  6c1f65ce96712e05f64c7a26b7adee36
- SHA1
  
  6cea6c2618fb31902c52cb1d5fad04503bd34ed0
- SHA256
  
  544f3c2c03f7900539d4868437f8e08204c0b4c79357af666a1fb48d406c1ffd
- SHA512
  
  5244d26d013dc2c7083bd4c167cac99307985babcabc1806a898a2621fce6b73d256b21d549bce8744f3221a51017ea5f621d2f6f5cd5aae83ec21ae41e5d5a6
- SSDEEP
  
  1536:1ki0RcSLEMxwjoTolPh9zyZFTEPmayYgH+t7Q0LtJhpdcOoyoJaZGUttW:IA/VHeZCP3ybHLK3hpdcO1oJaZttW
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  36KB
- MD5
  
  6958016193a066833556992077bad4fe
- SHA1
  
  5f564945936f99381d7e2408f034f97d069005a4
- SHA256
  
  f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
- SHA512
  
  fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
- SSDEEP
  
  384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
Score

1^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/SelfDelete.dll
- Size
  
  24KB
- MD5
  
  7bf1bd7661385621c7908e36958f582e
- SHA1
  
  43242d7731c097e95fb96753c8262609ff929410
- SHA256
  
  c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e
- SHA512
  
  8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f
- SSDEEP
  
  96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr
Score

1^/10
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/UserMgr.dll
- Size
  
  55KB
- MD5
  
  130f66c0161e6da46744abe3c0be4d9c
- SHA1
  
  d2a44a0cd07bc0c5d81fc0d056d6d45d200896ed
- SHA256
  
  955705c8c7188d06af16849e5cc3ceae79ea5d0808cc2851630a54d54bbc01f2
- SHA512
  
  915b9135da230ec8d3016ba83bd7102b3f8cb13050189a176f8d4d50363f13584fb971226458bc493cd2df27723c8ab7273effab7d6c6e14d49e735d24d7fac8
- SSDEEP
  
  768:fThBSJtwQegACHpCygw5eKeK/B/viiTRvTkujLWf2UEHzDSZA7yM5jt/BJE4lV:7SCQeLCHpCyNV9ZTRbkuOQzyMVt/blV
Score

3^/10
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/nsExec.dll
- Size
  
  6KB
- MD5
  
  cdff6b8f9523b6ef9f20fb5f9e90f1a5
- SHA1
  
  b25f6e0a19b41ff0a12de8e98e3005bc119d34fa
- SHA256
  
  80b2740fb3a21ffab022a96ce6b420019072f8ef3a048fd9dea4a5b64498c0c8
- SHA512
  
  62585c6a6103aed10f9a79c016df8cb630c3e37715542b5f26aa1a910771540c9b323ddbba3329db0ecf524143f7a27b782e198ce944317f764be6b9d04b792e
- SSDEEP
  
  96:W7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3trCUTMxVXw32E:IKgfwgcr8zylsB49lrCUTMxVX7
Score

3^/10
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/processes_second.dll
- Size
  
  140KB
- MD5
  
  f0a1eae66dd2f54fbe26c26db5493a6f
- SHA1
  
  46d56b4c6694da1ec4d88b0a5b153dad02b5dca7
- SHA256
  
  8fe4dad8f894bcdb9a83a9d302907de404695be4b50e619afd88f09d72583e69
- SHA512
  
  e1b3c946e90fc30b6cdf953c8c7e96121b462bf8529099e0587f7f243b9d73eeba52b510dd2598937f188f7a35bc1e3785b7589ec6c249996a5795c10dafd1e7
- SSDEEP
  
  3072:F+WSoWifAbFBgChOQcNg3kirQDNgv3gp9Ibzls8:iAAbFBgChOzNgUrDNgvgp
Score

3^/10
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/stack.dll
- Size
  
  10KB
- MD5
  
  0f61a81a543822de5fcb9a8a43f230dd
- SHA1
  
  d01d4a0f542f3c654637fdfe5a574fe1f150ece1
- SHA256
  
  46b4a72ae8590b0afb3304cc5c13db0502bc4c4cb02f64f37c79008c17db814f
- SHA512
  
  596b7a897ba64c32e26ba6168aa3628aad37b187a9814a286298307d8c42eabf8e8a679dbda558f8b2cdc8676c94ec819256432aa5ad7c05a5387759262a4402
- SSDEEP
  
  192:VBEc/BwQV5gTRk6uIu8uQubQuNu3fufuXuPDyuSuFujournu6udkuUuw0y9UrVo:VBEwBZmx97TSefeC/zIqoInvEkJ8y9x
Score

3^/10
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/xml.dll
- Size
  
  118KB
- MD5
  
  42df1fbaa87567adf2b4050805a1a545
- SHA1
  
  b892a6efbb39b7144248e0c0d79e53da474a9373
- SHA256
  
  e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845
- SHA512
  
  4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d
- SSDEEP
  
  1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK
Score

3^/10
behavioral29 behavioral30
- Target
  
  PrivacyView.exe
- Size
  
  4.5MB
- MD5
  
  7be9ccc87694b2a1b9aa047ae4ca9602
- SHA1
  
  f6203a1b5d3c8a1e886b6c9ef5e4f0a677406da0
- SHA256
  
  ce939a2f0c98bfacb3085d9fbb5faabb58e244e3595b945444718fa511af8fed
- SHA512
  
  1d02c5a1adbe9859d23b26f022a29d86df4a9f82840c12e0744a488bbf7447c38880ae3ffdd0cf2ff73bdc2a4e6e892d8a7ce2c8957db434119c2eb1e1c532a9
- SSDEEP
  
  24576:8qHMXhH80KqZwWDzpC1hVmkmkvObEObWa5WXsza5WXsl:fOKQwQC1hwkmkvOYOaa5WXsza5WXsl
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32