5cd4998506d4646d70b6f3a3fe058a7bb4f8e263f2af9797c0f9650b2174987f

Sharing

Copy URL Twitter E-mail

General

Target

1831d761fb741f67ae9d062f105629f6_JaffaCakes118
Size

17.8MB
Sample

240505-r97s9sdb9w
MD5

1831d761fb741f67ae9d062f105629f6
SHA1

5f52f97ae4a743846fc23e7d48b7882d157e57f2
SHA256

5cd4998506d4646d70b6f3a3fe058a7bb4f8e263f2af9797c0f9650b2174987f
SHA512

2e0ad575b267288a6ba3544215f390dada8191275d34b00756033d1fb095e81dfdef585d8711a37e131a78abb0c8f8557d4ad90a7f3cab0c17059bdaac6257a6
SSDEEP

393216:gomkrIGzJohodkHJPuEuWISuylGaBnsn5ZCAYf75WaMR0Y8rbu6cM2LJx:BmwLzJohod8JPMWWKGae5Zmj5a6jrbut

Score

7^/10

upx

Malware Config

Targets

- Target
  
  1831d761fb741f67ae9d062f105629f6_JaffaCakes118
- Size
  
  17.8MB
- MD5
  
  1831d761fb741f67ae9d062f105629f6
- SHA1
  
  5f52f97ae4a743846fc23e7d48b7882d157e57f2
- SHA256
  
  5cd4998506d4646d70b6f3a3fe058a7bb4f8e263f2af9797c0f9650b2174987f
- SHA512
  
  2e0ad575b267288a6ba3544215f390dada8191275d34b00756033d1fb095e81dfdef585d8711a37e131a78abb0c8f8557d4ad90a7f3cab0c17059bdaac6257a6
- SSDEEP
  
  393216:gomkrIGzJohodkHJPuEuWISuylGaBnsn5ZCAYf75WaMR0Y8rbu6cM2LJx:BmwLzJohod8JPMWWKGae5Zmj5a6jrbut
Score

3^/10
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/ButtonEvent.dll
- Size
  
  4KB
- MD5
  
  fad9d09fc0267e8513b8628e767b2604
- SHA1
  
  bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA256
  
  5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- SHA512
  
  b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/MyNsisExtend.dll
- Size
  
  536KB
- MD5
  
  ae20c78878bffd789a4f900d420a47fd
- SHA1
  
  166bb9311a99a4bb42dcb9337e704e0248ca8f58
- SHA256
  
  7690f9653732bf3d8ec0b0a89eaf6763171864d23bb41971e5b9649bbea80b60
- SHA512
  
  c0a9b177ca962e5fcd308c49e2f71afdb7d9498ef80547b2febece9765df6bb6f0d0623518aff22bf908189f26a8e1fb9aa326e9790501465d9e985f9993595b
- SSDEEP
  
  12288:zQXznhWxifqPG8yDAay0BQeMrtQW27ZJ6ObWTE5lqtmsV:zQXznYybPJnWTE5lqws
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  14KB
- MD5
  
  a5f8399a743ab7f9c88c645c35b1ebb5
- SHA1
  
  168f3c158913b0367bf79fa413357fbe97018191
- SHA256
  
  dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
- SHA512
  
  824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
- SSDEEP
  
  192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/locate.dll
- Size
  
  17KB
- MD5
  
  7d3317f57c1a368480ace3c0ca804eeb
- SHA1
  
  d4c7e185bc64aac82339f51ba6c21cf0713c9f1a
- SHA256
  
  d88a04c1e39db583eaad727fd390fe599ab10198ee040bfbdd22daefadbd2372
- SHA512
  
  5598c2e6caa2f66edd48f8c8305e054d4b0740b5f2b7ed92cf197a13ac66ba99a32013d34b3c2e28d007ab7979eb90a50681324eb736b1410e7df1902e4ec32a
- SSDEEP
  
  384:ev/vPBkA6dK8wiLe45naPji7hpx2kRV+qgm:evyvwiNnGji7Xxjc8
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  c10e04dd4ad4277d5adc951bb331c777
- SHA1
  
  b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA256
  
  e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- SHA512
  
  853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP
  
  96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/nsRandom.dll
- Size
  
  21KB
- MD5
  
  ab467b8dfaa660a0f0e5b26e28af5735
- SHA1
  
  596abd2c31eaff3479edf2069db1c155b59ce74d
- SHA256
  
  db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
- SHA512
  
  7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301
- SSDEEP
  
  384:LCHDPMs4GdtyO5roguusMxUXiO3wOw95euooP2UgKbd9BvNtf:LCHD6Gh87MKXil/5r2U3z
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/xml.dll
- Size
  
  118KB
- MD5
  
  42df1fbaa87567adf2b4050805a1a545
- SHA1
  
  b892a6efbb39b7144248e0c0d79e53da474a9373
- SHA256
  
  e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845
- SHA512
  
  4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d
- SSDEEP
  
  1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK
Score

3^/10
behavioral17 behavioral18
- Target
  
  $TEMP/$_89_/MyNsisSkin.dll
- Size
  
  324KB
- MD5
  
  c42575c6e2e273c04eb7bc3e4119e337
- SHA1
  
  658e3d042e28196a321ee6446b9e6845d5478abc
- SHA256
  
  9f8c4e9ae3d8b764f860b19024ce077a26758d79eeed309a475fa152b7a1f736
- SHA512
  
  b1743d6804685da6c8ea2cea2d91c2f98e2e2ff9eaeccc7d873f1f90eb58f43c50d17b9acb309e71eb94c3b38f5dcc6736d2f0fc2c1a089eae4cca8d4743c308
- SSDEEP
  
  6144:FOrNKQjNQnWqJolkFucBm1fXr9ICcYerKJbYm3IyU:F4NKQjNQfqOuEm1fXncdrKJbJg
Score

1^/10
behavioral19 behavioral20
- Target
  
  GSDII.exe
- Size
  
  52KB
- MD5
  
  c8cd45d39088ed6f3a31cc66aead9d78
- SHA1
  
  a6b7ab8e4598c9b5ee05ef5724745734711fce75
- SHA256
  
  53ebdb4538de0a7db5e3d89e6ca56ec8941410b26ad87ea4bc05e3716668c939
- SHA512
  
  9eb4eafe998c292e3e09022742fd4da19d60911b299a512f37f542c5f786f8e19cb7948dd22c5f0409190994df69df4cb21b25bc090a2c16a99852e949703e46
- SSDEEP
  
  768:8ouyZyhFLdzUt0aKyJSdAtKW5pPA9c2AFKTXrCX:8oJyhNdk0aG+EWs9chFImX
Score

1^/10
behavioral21 behavioral22
- Target
  
  GSDMain.dll
- Size
  
  960KB
- MD5
  
  24e279aea9fac64476b9e1faec7dbb1e
- SHA1
  
  a28b9d8305b92f843759dbf7d05ca5dfe09ff822
- SHA256
  
  63128ea80936d0830889e0deafc4b39ff58fca210a1be762b74c971630fdb29f
- SHA512
  
  56694fada9ef89cb42beae864ad2a05f7b253310cdf5b90ce843d9c1d6533950c2126a360558dc0dae793ed8bc14915ced03a64306c0bf4ae279b2433c82d46e
- SSDEEP
  
  24576:XRRIDf29xSDgRi9Rql1BxbUkwnkjiepakMBW6feRAKTt7eSZLWk9slD:BRWf2U9Rql1BxbUkwnkjiepakMBW6feo
Score

1^/10
behavioral23 behavioral24
- Target
  
  GSDSound.dll
- Size
  
  244KB
- MD5
  
  3b36c316be2f849fb1a6f4f00c6848e9
- SHA1
  
  5a27b238ee68d112340d2c9a67f202df9b095003
- SHA256
  
  ff927e18ca803d926c14c54cec7dc7487eb7546de2c3e027575a697d6a96edf8
- SHA512
  
  db63fb3d781352df4e2bd0cdef74d747f8a6f634a1615f0a6580f3e3f1f58e9e6150e21114af3b3d1f0d0278c0075a3a703cddd9e0ff071c238601a791ca9955
- SSDEEP
  
  1536:AFnnkzANIgy40CQWzLLl27Jghrl54GELdYLKuN3ezfa7TPYvrUabOYcXTotinQHk:Ankz/OV4GEYuuN8CmUaSzDovm
Score

1^/10
behavioral25 behavioral26
- Target
  
  HSInputCfg.exe
- Size
  
  260KB
- MD5
  
  85cb168bf6ff9e8506fa861e6c33305c
- SHA1
  
  2080431126a81d74f62c83e57381bb0fa2039458
- SHA256
  
  508e9913e32ec5e15295fa85375d9ec32c4e75410aa314028863c1b1dcc94bfe
- SHA512
  
  9f9d5b579cd47c8765b11e1ec889af74fdd97d2b56570371e67488714f1e6541af389b645bbe0f27cb3b0ff0fb0ce4465b688e6ca252b3ad7ea5dd59f1d8c69e
- SSDEEP
  
  3072:baJTPq7F5sFoLlrCE/sFicj66I91oB4+idKeGAdRd0tCHjFXiFjczDauxo1Zu2:sTyB5sFoLlrQVridKydwCHjUAaBZu2
Score

1^/10
behavioral27 behavioral28
- Target
  
  dmlib.dll
- Size
  
  56KB
- MD5
  
  8a791697b5885862958122f8790839f8
- SHA1
  
  a0146491b11bda62b7da1a2be6a9b78e08533a6c
- SHA256
  
  7c436d24939fb3e70cb16fea19654b9c93d814aa6c57ff4d5e69aac546cc26c1
- SHA512
  
  9f1c0ef563f3df917dc4005d49074ec28924fb6a5a27a7acfe22a03203a72c7a1d2d13200db1dca11f6bfa49379cc7d8769b769b9b508c232b34f18eb9ddb35c
- SSDEEP
  
  768:nocr8nXoQHT2sRhjAn7PEMT1p0xaao5e+KiB9aOfuFP1SOhpolM:ocItmTEMT1p0Po5K0Id5o
Score

1^/10
behavioral29 behavioral30
- Target
  
  gdiplus.dll
- Size
  
  1.6MB
- MD5
  
  d0aaae16ba162dd89d646887f1539855
- SHA1
  
  0a222f319b7712b861ef6adf0c38cc2c5a2790fa
- SHA256
  
  d84e7eb505adee8ea660f48c89705977f5eb33b7299d0bd981624e3ece320223
- SHA512
  
  6d7cf7b3a1dc0560791bc3db4fc836ad0f58b8b531c593d96a37bb77afa3ab7dd6bd4d66a97e37cde3443078eb189609d8d36119198c60ce6b74c1a093000769
- SSDEEP
  
  24576:i0CiGmsJ2LC4jJmNwP+6fBUAK8C0m1DQucWM9nul/SuyZfWPP90bTv6:i0K2L1Pjf2AKWmFcLulMZ9H
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32