896fca5100c8a8c0b84908249cafa259654cf5eaf8191fa5da65d57b7b727dae

Sharing

Copy URL Twitter E-mail

General

Target
4d43fefdff96dcbf5952ab4ece7b7095_JaffaCakes118
Size 4.4MB
Sample240516-145amaba78
SHA256 896fca5100c8a8c0b84908249cafa259654cf5eaf8191fa5da65d57b7b727dae
MD5 4d43fefdff96dcbf5952ab4ece7b7095
SHA1 fbc4e8ff04d80efd7deeddbac57ff7e1913fe111
SHA512 caf3fe50ef5e85a1d33fac7441081225c33081065195289b7b401dbac62b97fb5d178f0a1fef9b8b6687440fa107b97a60a7d832f98626072933c5cad6261209
SSDEEP 98304:EonOUD95qLifm9wym6raXMsJij8uoioH7rW+6QUdZndCoGqc6BUN+/kP/:Ek6Liemym6mcsAYuPQUm3K7c/
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  4d43fefdff96dcbf5952ab4ece7b7095_JaffaCakes118
- Size 4.4MB
- SHA256 896fca5100c8a8c0b84908249cafa259654cf5eaf8191fa5da65d57b7b727dae
- MD5 4d43fefdff96dcbf5952ab4ece7b7095
- SHA1 fbc4e8ff04d80efd7deeddbac57ff7e1913fe111
- SHA512 caf3fe50ef5e85a1d33fac7441081225c33081065195289b7b401dbac62b97fb5d178f0a1fef9b8b6687440fa107b97a60a7d832f98626072933c5cad6261209
- SSDEEP 98304:EonOUD95qLifm9wym6raXMsJij8uoioH7rW+6QUdZndCoGqc6BUN+/kP/:Ek6Liemym6mcsAYuPQUm3K7c/
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49
- MD5 a436db0c473a087eb61ff5c53c34ba27
- SHA1 65ea67e424e75f5065132b539c8b2eda88aa0506
- SHA512 908f46a855480af6eacb2fb64de0e60b1e04bbb10b23992e2cf38a4cbebdcd7d3928c4c022d7ad9f7479265a8f426b93eef580afec95570e654c360d62f5e08d
- SSDEEP 192:aVL7iZJX76BisO7+UZEw+Rl59pV8ghsVJ39dx8T:d7NsOpZsfLMJ39e
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1f861aeb145ebbb9a2628414e6dca6b06d0bfb252f2de624b86814cfec8097d0
- MD5 e75ae7cfe06ff9692d98a934f6aa2d3c
- SHA1 d5fd4a59a39630c4693ce656bbbc0a55ede0a500
- SHA512 ab4998f8f6bbb60321d0c2aa941d4e85319901960297059bf0832cf84b18dfbb120c3aa71963b46d3be3b7c9602434cb23f9a961c00de02403b3f266b294d41b
- SSDEEP 96:3np41CMj95rKhkfL5RkEdKkcxM2DjDf3GEEE9v5E9av+Yx40ndY7ndS27gA:3nujesS4HREEK5MYxtdqn420
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 579a034ff5ab9b732a318b1636c2902840f604e8e664f5b93c07a99253b3c9cf
- MD5 faa7f034b38e729a983965c04cc70fc1
- SHA1 df8bda55b498976ea47d25d8a77539b049dab55e
- SHA512 7868f9b437fcf829ad993ff57995f58836ad578458994361c72ae1bf1dfb74022f9f9e948b48afd3361ed3426c4f85b4bb0d595e38ee278fee5c4425c4491dbf
- SSDEEP 48:iYXzAm8HGJLvwM8GJFd6I7W4JtT2bxNNAa4GsNf+CJ8aYqmtlKdgAtgma1QvtCSJ:lz2mJkpGR6GY74GQ1YqmstgGCtR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $_2_/SBIEBrowserHelperObject.dll
- Size 21KB
- SHA256 d7a4f12d0d576b02c11f802f156708954ea9e6875ff0e9abab2058f59da2c8b7
- MD5 49c49109ca8caf9a170a21117f6a6dd5
- SHA1 2c0f16cba5fb2e373959470ae6426df622253e6c
- SHA512 5d9f4f6278c52b84bea4341d3d04da68926f0868f68fba2f2d0429777d33ecd54b58bcddd5d959fd20a3810095a3907624e6362b857d51640c68394a8aab9c9c
- SSDEEP 384:+EQ47Fg5TfkzQaIY8nztOtuqmXIY4NnCYuSPLn8wu9t:txg57kzQvY8ztOt5a4NAwu9t
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10

adware stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral10 behavioral9
- Target
  $_2_/sma.exe
- Size 123KB
- SHA256 3d31bcac2f083cc4b2902d2951340428918bc86ae59931d86c3f4c0428823cb9
- MD5 0cc5d164e588be92d0864697e1374786
- SHA1 41b23be0206a5e14fc908241c978635bde890fd4
- SHA512 90bb2ebcfe03d9074e2363a578d4f48f37f407af1bce06922d6b4e6f5cfc373fd6d67b4a83f170d05d47a4904d07c80c67e8ede9cad0873c5cf85ed5826460fe
- SSDEEP 3072:ZKWA/6zh+gyaUAsmm9jetJ9h9yMRMHlhTaBLbT6uuGOKYo:ZnyVADmhepHE6yuuGOKn
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  $_2_/smci32.dll
- Size 1.1MB
- SHA256 461ff9954aa754a9a7a7e8a7fa915e8b7c25695b5b437925899920bc935443ff
- MD5 4c7a3f9e1b0884bb7aabcfafa320b734
- SHA1 5a8a83045942cd57b85daf2c487a50e1688213db
- SHA512 522d213b8350cf5a5fb9f24b08ad84ace359d24fc924fba608c75332757fefe4f74c203022ddb4b15254a265d1a1c6b4a67185de037a24c7047ce6087ac63065
- SSDEEP 24576:iaruHFn6vPGC8JC+ZBpLAJJ8A8oLPMoxgu1VGveIj3qe9HgE:iacwPZYjxmJwoxgu14vrpAE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  $_2_/smci64.dll
- Size 1.6MB
- SHA256 ea82417b5e062b0ecb41d6845d21c5349d22b0d07982ba3329447e5c79e7a219
- MD5 763328c6241ef10e5ddcc0e6f5827590
- SHA1 19e000f7b25129c5a93a2191b9184de73508d647
- SHA512 da0c15a38aba5b103ef75ffc748010e4cc9556401dffa961cedad84522a3386982becc3281e2a4c7dd4cd2062f1ff2380aea417d1aa883b132494a660502b352
- SSDEEP 49152:/giE5DdnhbYmb2AoLs74TXg6hagboPXkifKx/jFVkWEQ:ZDLxP7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  $_2_/smei32.dll
- Size 714KB
- SHA256 b89e2b68c30722ed11b0393f7c4dbe6b6626c8be2c699b6cdf7d45b36205dd35
- MD5 e6b622fe67b96ca3c07f35bcb6ce959c
- SHA1 6ef7f5d1bcdba08295369c3cc6ee8880910d94c1
- SHA512 4d25346e888ef05db64a885a93ffc2ff84eb177c1fb32dd3a53c2c6694a66478df5f495175c8f1d9a38f7978b19107573941c4f6751ecc6fe28b8bae5d1c478d
- SSDEEP 12288:x5FYpapmFC3/sh+yccH9386G3Es61N4R25Bo5RKbjHmFj:Vse6NPo5RsjGFj
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  $_2_/smei64.dll
- Size 1.0MB
- SHA256 a469b32a01109109c9e1aceb982f8dbbbabca6cb9ceaded02c1c8b4576bbb518
- MD5 cf3ce3f2e62186d419d33b1876d64e71
- SHA1 ebc0088eba1b388d231749cdd665736ce72a54cd
- SHA512 4be8004642e065598e1abb37453bb03015ac775804e14e44a2e481055a31e205c71e3e296b9f2798782ad6da3c0d3212b55329c1cf0c9f0b35f5ad41a33d9fe8
- SSDEEP 12288:YcyNJqUSJQjVpvtfmKECtLQhX1IjwkECTtYo3kw9Yk/eeL8e8eZ:nyqUH3tfmKE4gX1IjwkECTtLkGF
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  $_2_/smfi32.dll
- Size 654KB
- SHA256 6dbb300c0e65f527a7ad55c4920588665b71e611e039aa1a14fa5df61ed704b0
- MD5 4fb44efc16bdb28fb9e1b37d6a5dafdc
- SHA1 554eb0669a8081537622d1084040cd6fe3d4d311
- SHA512 21a3c3a44809be644345e6f9b599fe414a22307bc5a6c2118ce37456190857aa62b5afbbac89f96352d2280b8806aadb4457584e716d6329cb4158a8ec30a604
- SSDEEP 12288:xF2AiJhXpp2ulZgMmxsqbRWJNHv/ZDUYBH9eA4EkB4WTh2X9EcUSoxYQ7:niJZblZ76EHv/bdkBjTh2tEcBoxYQ7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  $_2_/smfi64.dll
- Size 914KB
- SHA256 44e33f71cbf20705a9790d81c1e63d53cfaffa1b6d3a5f682f4139a1443a1ea2
- MD5 91e766236dd99b4d32c549401f00ea5f
- SHA1 2c0f1c2bdf38f0b88cb438d7e6387a71ad08becc
- SHA512 66c5d02f90f214537c82b6dae660030626bea11f8bcaf305653ca0cb3d22cd9a2688b75cae89ca724261793163be1baac43ea99dd3b496cb35b398e32d154da9
- SSDEEP 12288:wdf69XHgI6NwygEOmL+WUOXLVVI9t7r3YzqPDwWie+SfST0NKeu2TRLz203bKuSY:o69XHgI03OmbUOXjPT0NKeJTRLyAOlmR
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  $_2_/smi32.exe
- Size 77KB
- SHA256 500beb1afdfd240591a9fb682d09346d0c5d3dfbe1baaae395f7bd03d58ddce1
- MD5 ec042c4fcdc5e9c473566b45a8b762bb
- SHA1 2f8406f832ecd6aa97fec148e88221817b93b36c
- SHA512 ecec8f8a5446efc9d4098d8bf7b0e2bed2c41f08269e6d240950e2e29bde259921677549c69090b02d9835a9803102fd3d238f38947f19059270f546684ea284
- SSDEEP 1536:HLmJA30oPFOsc4e2+5w3e9Px+nimjO2Mx:Hf0oN8ke9Px+niSO2Mx
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  $_2_/smi64.exe
- Size 98KB
- SHA256 8e15b1bccdebd2a67d93246a86419da1db13bfd56a348f5cc212516c6f291359
- MD5 efa6cf84433a6ea42581168417eafa25
- SHA1 3ab26e865872391c3a5a875ad22dc9788c0dc469
- SHA512 972e8d583cb57dfa51de2ec065b6c0b16ec33e6aab270360dce8ca11af955c233f5743231c849b86861b8d51c73b0956c2735532e9ee13cfe02b4c96333f4db5
- SSDEEP 1536:qG+sFhvoYz9n0QO+CXRTzeXVitXCGX950rkDpTwFH5sO+2s4S:q2voYB0QOZXRTwiJCGP0MTwFZsO+2nS
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  $_2_/smoi32.dll
- Size 401KB
- SHA256 dd4b0dca1c87581cbcd2df4c6a93d6ee73fca8d1f98f0df471d3ab0cf21badd8
- MD5 5d4097a4ffb42d5013be4c351ba258a4
- SHA1 58a35517dd12b16bd125a3424b04a658dc33d41e
- SHA512 ad06befbc13612d2c17e60170e8e76e47de9d032d7b480c0b63b9e39f4fbadcb5402f83e01e93a614c1c9986bbfe67be794d586afe993ae220e40dca34c0b119
- SSDEEP 6144:/Xo/c1CCF2/CuCzZBM3CcCH9bN05PLTCtZzCOo0ClIUOtoq1/Zc7fap:/Y/cjFUiFB9LH9bu5PLWtVCOXAIVefap
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  $_2_/smoi64.dll
- Size 610KB
- SHA256 ecd5ec52f274fcacd54a209c68492c966a892436fed7d638db7bed99ce7870bd
- MD5 69ee3f1d3695493082b7218ff52f1a3e
- SHA1 9c741a451b514c798d1a4ba12e8a41a951efb9a3
- SHA512 cb7fda1a4929f4485917201f0cbeddfb8680a0ff40204483f767bd573b8d36e4ef65becf3f33546ece81eba7946cb12edd8d9a2a25cccd1df508921342a770cb
- SSDEEP 6144:0gLFLjt+H7lAx3YnkeDM6H4IlxpKICRaOSQvhnGfgSQuOyGoR/n2O4UOlHqJNXYj:r84yBldQvhnGfgSOyGfEHo
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

T1176

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

VMProtect packed file

Installs/modifies Browser Helper Object

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32