10178e95452db24c36039db74c9b9d2e12d99c5981b71e1a388ac77fa4c389c0

Sharing

Copy URL

Twitter E-mail

General

Target

025617c8a0f03afa089ac874af5d9ba3_JaffaCakes118
Size

789KB
Sample

240427-d78qwsab98
MD5

025617c8a0f03afa089ac874af5d9ba3
SHA1

c18884d506af1cc219c71a47ca2e9933a5d12b49
SHA256

10178e95452db24c36039db74c9b9d2e12d99c5981b71e1a388ac77fa4c389c0
SHA512

6881e02ee66784b8a908d060fa09ad88222e0b2bb5eae75e4f942524f2836e556a174d07ec966628cceb4fa79c03195c66b65a58f18db681ec36a8eea4bfe572
SSDEEP

12288:2xpJ/xOJ5iQ/817fkZZ3Yzboo9RM6RS3r8Qksh0+vhd00hx+9BWEXS3BNmB:Cppxs5iQ/817L0o9q6RSg0d0YJEi3BNW

Score

7^/10

Malware Config

Targets

- Target
  
  025617c8a0f03afa089ac874af5d9ba3_JaffaCakes118
- Size
  
  789KB
- MD5
  
  025617c8a0f03afa089ac874af5d9ba3
- SHA1
  
  c18884d506af1cc219c71a47ca2e9933a5d12b49
- SHA256
  
  10178e95452db24c36039db74c9b9d2e12d99c5981b71e1a388ac77fa4c389c0
- SHA512
  
  6881e02ee66784b8a908d060fa09ad88222e0b2bb5eae75e4f942524f2836e556a174d07ec966628cceb4fa79c03195c66b65a58f18db681ec36a8eea4bfe572
- SSDEEP
  
  12288:2xpJ/xOJ5iQ/817fkZZ3Yzboo9RM6RS3r8Qksh0+vhd00hx+9BWEXS3BNmB:Cppxs5iQ/817L0o9q6RSg0d0YJEi3BNW
Score

7^/10

evasion trojan upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/BrowserControl.lua
- Size
  
  4KB
- MD5
  
  3e3f492cc3a33b452bd8c6a1c611856b
- SHA1
  
  3b24b28852dc2cd26fc0586ce7d3f0f91bb2d0c6
- SHA256
  
  40458af79f4fe53dba5f526e5442df47454ee8ebd21be1063d6706f87ac40e15
- SHA512
  
  3a190e92be927a3393713b5a40a049ad8e4fc493225d3536a1b3ad26693202622f88d5ce2b3b24f23bb61c754e8ca2682a7f884c7bbccac6f96fa9b56a0ed1a1
- SSDEEP
  
  96:YcPFcSnAqMP6HAjidEJNMLwLzm1Bh25NsWhPEEPNeCmhLCzgtKE:YcNcSA7PNMAzm6blV3mc0tKE
Score

1^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/ButtonEvent.dll
- Size
  
  4KB
- MD5
  
  fad9d09fc0267e8513b8628e767b2604
- SHA1
  
  bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA256
  
  5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- SHA512
  
  b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/DownloadList.lua
- Size
  
  11KB
- MD5
  
  a00836c3e80f77f5151941b3dc67b40e
- SHA1
  
  9ac339ffb13ea94433f91b7a0bfe848d550ed524
- SHA256
  
  311e4f5fe148b5657e465e953910b56c68e8d7ff27933b272b0d022ec7330170
- SHA512
  
  20d0d4e37b7ad4390b590c583f9f9c7f584825e99ac3aaafd5d43f3f460b2bc1da7ec92a9bb5dda3bd5414980d94c0a196848346677cb8417e654c93528b7130
- SSDEEP
  
  192:ezEiapMCIJxijlQ6PdrqoV4V4WUJsQO3M3SSorDGz:eJMpk0lQodr6V4pvO83SlW
Score

1^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/FloatingProgress.dll
- Size
  
  25KB
- MD5
  
  0f26c6d34d3841e93145dd00d0175651
- SHA1
  
  57b068569d0eb2336503beed87589629ab2a6f1f
- SHA256
  
  0cc5dc45b6a04ec236f4ecf0eeee212096b1561179d71c49dd5fc82aba706741
- SHA512
  
  72785e520d78a4ebd8779e5497806406c1b91b9c05ed82a392a6af689781e26c77f0032c66540b80e2e7e457128df2afd0647b0dbc970a11d0cd4ee3930d47a5
- SSDEEP
  
  192:1cpwREp+D1UTyFDoUjSFWbY3Lf+25meJVOuN+Sx10mvmWc4b61n:1fU8fc7fV8C+I2mw4b61n
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/GuiInit.lua
- Size
  
  154KB
- MD5
  
  25c670cb7f3981280bbaf10dbc8d1217
- SHA1
  
  1a999a2053c5bc3b2741049aa9dca0d068b3c5ab
- SHA256
  
  4d0e98b56b1ca881d525443d55fa171ed821dc9186dad068ba85120b2be34f96
- SHA512
  
  ff31e9d91ca493ff5eecdfddbbca49fce0eb49b806d37055c58817f3bc2b2551d79a81cc2ad79ecd509da9009c497aae2965d98c38ec8bceb942a2640a273252
- SSDEEP
  
  1536:N0mQow99RPCHoJ8G/07IUnBAjmT/O3b+g8eowBnegMzDLyi2D8QE78xfMx:NfM7eoJ87dOpOy1TRxUx
Score

1^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/IntegratedOffer.lua
- Size
  
  42KB
- MD5
  
  bf7ea3647e9d40ac9f3a47ce92a73711
- SHA1
  
  d87f173564c0418ac3c4fb5a28d0ba04551d1d70
- SHA256
  
  8660a18c2888e82fd1fc2737cf78402e87d9ee5537e136690c8c4067cff74675
- SHA512
  
  fe82fac0656cc585561714f92b10acf2e466f4cd16abe281c6448264b17cbfe9edd68205ef591367bf01d198e976e224799f7b810561acb44865333e0e04ce4f
- SSDEEP
  
  384:52KtdoVClYfeDhqqUKWE+BzxQ16YJDAkOw2LkrtAIK2KDwqy8Z/JQ4q29TDX:52W8ClYfe9UTE+pS6/yrt+vyO/1X
Score

1^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/LuaBridge.dll
- Size
  
  56KB
- MD5
  
  ff60d18a83e7f2ad04a3c2260af6d4f3
- SHA1
  
  153f7d7b76592fc3323cf07101b3a8ab35c095b2
- SHA256
  
  9af7a3241ed090f7549bb6f7c4cb9d0c718eeeb9366dfe576cf29841483d60a1
- SHA512
  
  bbab72c4e6e60f0b0951c81d49827669627e3f32d03f978f5122db83298772eddd1e4046b73335f44683ee29bd68bc9da23fba2e14833e2357111857d842a694
- SSDEEP
  
  1536:yDcIngqGIubtZHu3VxJtBkS78HDx/QWyKMzn+:RIgqDVt8jx/QW1w+
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/LuaSocket/lua/ltn12.lua
- Size
  
  8KB
- MD5
  
  e440044afe6c761507a996b5b45ab0f9
- SHA1
  
  ef772c758fd5d6098b41375f35ac26f3963cc306
- SHA256
  
  b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
- SHA512
  
  8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
- SSDEEP
  
  192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
Score

1^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/LuaSocket/lua/mime.lua
- Size
  
  2KB
- MD5
  
  4bfdaaab9014fe129bc6388fd5687c8f
- SHA1
  
  2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
- SHA256
  
  e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
- SHA512
  
  3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
Score

1^/10
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket.lua
- Size
  
  4KB
- MD5
  
  74dbe1060e91112e1c21ef9870b4a587
- SHA1
  
  86afb6aecb0a8387ffa5dead1cc9808332f94310
- SHA256
  
  15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
- SHA512
  
  73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
- SSDEEP
  
  96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
Score

1^/10
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
- Size
  
  9KB
- MD5
  
  7309f4294ae4abb4f6ae657b2a98d488
- SHA1
  
  327d143e9f7a1835a58fdaf569a8f7a937fcf2c0
- SHA256
  
  9ba5df91091c46f0ffe0a93ace577a4833c92cbec1742113d0a2da9e568f9a10
- SHA512
  
  a44d2603af63828e8a0b1fbc7455305c616e5bae4a351b429e7e94a6aa7e4d6425f69d57d6a44ba87ee5d29accfc01c1f3ff288652120ff8f08a66543d357895
- SSDEEP
  
  192:GsooRaLonJfMxBs6gZO2zMAcTcGZqxOU6iOeBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7U6iOeBRkfYtW
Score

1^/10
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/http.lua
- Size
  
  12KB
- MD5
  
  0eb1f0ffcb4dd17c22b20a3d7d6654db
- SHA1
  
  bae3d2be867f62c5f8d7e769248f053c50a1ab8d
- SHA256
  
  04e6a7526ed1dc51f4d1f9b25b56f0c7826367ae3f2468a8622e359663ee5526
- SHA512
  
  f9362cb8a84312aa3f12c93fa268f5950ebd575abb54f3778a5f3aa935e1c7685b7bf78e8a6a3eabe67094914ec90143ecdd384a4341f000fda41b686b486d97
- SSDEEP
  
  384:x7/thyc+f7zLajrZhVoaOt2yyVizJvcGwkD:F/thyc+f7zyoaOt2yqizJLvD
Score

1^/10
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
- Size
  
  3KB
- MD5
  
  2cad406e591cade482c7f16f39c21481
- SHA1
  
  84a3ab88ff7a9102c2c6d21bdb6eede6862167a4
- SHA256
  
  343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269
- SHA512
  
  ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145
Score

1^/10
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/LuaSocket/mime/core.dll
- Size
  
  52KB
- MD5
  
  4a4845ba1666907f708c9c10a31ec227
- SHA1
  
  1ebf626adc84147e5114885ce779f92d6eb68f3a
- SHA256
  
  a1ffee9687ab4a23a78b3251888aff09e2896d76f8d16d713367b265f125188d
- SHA512
  
  d009f5e2a2ecfbec5e5e788ade142d612846d0c99921774e4a11b060998dfb0680cf1e1a54604535d5560738093f9ae166866cb23eee5c7d9c4e5cc5a33e7464
- SSDEEP
  
  768:Hk1jtHTV0IuugoXCodH5LjciB9snJ1hTgZNno42L:HkhtHTeroXR3aL0toV
Score

1^/10
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/LuaSocket/socket/core.dll
- Size
  
  80KB
- MD5
  
  4bf7db111acfa7c28ad36606107b3322
- SHA1
  
  6f20b9f6663ce0c309a2ce60e718d64ffb6c75b3
- SHA256
  
  bfe8445c38ee71240e856f85d79e94123d7179bf43688de0e2a14e32e6ef21b0
- SHA512
  
  0a5e66a65b80e15d8198f2934c58227ae17680f0fbea9865b2f44af82a29c53d4f95cf9616b4dfd75202420eb73b7d962cf2c84fdad6ce26afe1eb4bb978d0b6
- SSDEEP
  
  768:4pOz0XSP1hSt5+5lKfZyDy3TygCk749NRAa1YwqJlfp8iB9jDEu/s5RPOothtlRp:wOws14t5CeTygmNRA0IVh05IoN3
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

ACProtect 1.3x - 1.4x DLL software

Loads dropped DLL

UPX packed file

Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32