d453f0e745c8ea0ff5d918d0358662dec10af3b8cef3061e445ec87aca4cd8fe

Sharing

Copy URL Twitter E-mail

General

Target
7b05f044d0d11ceab911aa9f36500eb3_JaffaCakes118
Size 9.3MB
Sample240528-aee2bsfb31
SHA256 d453f0e745c8ea0ff5d918d0358662dec10af3b8cef3061e445ec87aca4cd8fe
MD5 7b05f044d0d11ceab911aa9f36500eb3
SHA1 ad73f4fb058c2ec7e746055da22b19bee9a7d93f
SHA512 47925bd10569faa72ca7dbdb2e5aa1b0d7604d886f4547dad006d2af2c6f97f56fde27ce6236dd68668fe2678cc8b14bb96a7a43ac7d62a9eee28d2501ccd181
SSDEEP 196608:aKuQFeymb/5YZqOamP7kDP0+S4p+RSIiWH028Q7ANsT96:JTYyquMdmjkw+qSIS+KsT96
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Targets

- Target
  ClearTrack.bat
- Size 577B
- SHA256 22aa094891ad110c9ec7cb143ea18a5b60f22af3e440081223c26e24e885ad60
- MD5 fa2c85c6ba7d10a910c3b2d0870bb79e
- SHA1 3fc5b53360b665800bd98ff284b1a18a16bc66bb
- SHA512 9c4bb85be39d20ef9547631fda759669cc52cb4154183389cfd6a6b80fb5bc5e18dd42877e31653b8779ce9851c7499b51066276500b10a1ae75841f6f9fc33b
- MD5 SHA1 SHA512
Score

1^/10
behavioral1 behavioral2
- Target
  ClearTrack.exe
- Size 179KB
- SHA256 703907ad4d1c128669a0a75236a9c993ac3bf4d59153a2306f8ed6b1f8000730
- MD5 55860160a16f2ebd445b452908ee93d9
- SHA1 87e18db5e59325530e5c1fd16ad0d158e48ea406
- SHA512 533b428fae5557b950b15dfe9ddfdcbc9d07cd55507196b3162b4814a55fba6aaf93fd955e89b4869360a681dbe20588882afccaf38b22e9b4eff24775031bea
- SSDEEP 1536:EREBs+O3jqcHxpwZhShfvrrIF/s37Ad4wmrN2mkKMkF59c1XvLt/lEOl:ESB1WVxpwirrIF/u7Adrmr9jS1jt/lN
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  ClearTrack.jar
- Size 2.5MB
- SHA256 79e52729e7047c7d4ae1852e597dfbdf0157a918bbe3d3c40497d39e32fa22aa
- MD5 083d00d51f4c51023ff95a11ab149e58
- SHA1 d815af54f77958a80def4b3dac46a4c825e024aa
- SHA512 de3990866c44b5d8868ef14d1ab7cf1f115b0cd1e3dd04ffe68d77f263e7c52aadde35c07b156ada9adb4940e5d8009bcacdce25865f7cd0791496838c1a2896
- SSDEEP 49152:Hu+NKy8ZcHKM1xJlUmhlliBnyydaNqxTrplRibc/TbMCLFxAPahbTMeFUW:OMKzuHJlAngqhr4YTbMCLFqihXHFUW
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral5 behavioral6
- Target
  ClearTrack.sh
- Size 64B
- SHA256 c0ff6a3d5e0041ec29c1ea7c5a5f1c55db4b9cdd1edf74286707c864c4bec7f7
- MD5 30b5fbc6df9c88a586d48e6939feef9f
- SHA1 db6c89575e1bee61e1930349e60f3f1c0113c2d8
- SHA512 dbf2d0d8941de3b66df27ed2b5e40d5c10a150752c6ce22ea3c83f5858dc513d02eca26fa9d4d9f6aff2bcc7f128f56e6b6aea9cc88624fd12ed8510a2122969
- MD5 SHA1 SHA512
Score

3^/10
behavioral7 behavioral8
- Target
  ClearTrack.bat
- Size 577B
- SHA256 22aa094891ad110c9ec7cb143ea18a5b60f22af3e440081223c26e24e885ad60
- MD5 fa2c85c6ba7d10a910c3b2d0870bb79e
- SHA1 3fc5b53360b665800bd98ff284b1a18a16bc66bb
- SHA512 9c4bb85be39d20ef9547631fda759669cc52cb4154183389cfd6a6b80fb5bc5e18dd42877e31653b8779ce9851c7499b51066276500b10a1ae75841f6f9fc33b
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral9
- Target
  ClearTrack.exe
- Size 179KB
- SHA256 703907ad4d1c128669a0a75236a9c993ac3bf4d59153a2306f8ed6b1f8000730
- MD5 55860160a16f2ebd445b452908ee93d9
- SHA1 87e18db5e59325530e5c1fd16ad0d158e48ea406
- SHA512 533b428fae5557b950b15dfe9ddfdcbc9d07cd55507196b3162b4814a55fba6aaf93fd955e89b4869360a681dbe20588882afccaf38b22e9b4eff24775031bea
- SSDEEP 1536:EREBs+O3jqcHxpwZhShfvrrIF/s37Ad4wmrN2mkKMkF59c1XvLt/lEOl:ESB1WVxpwirrIF/u7Adrmr9jS1jt/lN
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral11 behavioral12
- Target
  ClearTrack.jar
- Size 2.5MB
- SHA256 4a966e7bdb78907789a785e63ae0da98ff496381af875b401fb24141e1976397
- MD5 7ce63298eb45bc55e8fc92b314d8fd94
- SHA1 f9aae437215b30378fc6fbe68df8c78e65f78a09
- SHA512 b40ba64ed1cb6f9ef9269afaef2d200d0dde296e0619c386ecdeb3ec8b059e52780a40ab5316413738a006fea7689d35e069fa7596e55f92588009f7337236e4
- SSDEEP 49152:CWyYBZcHKM1xJlUmhlliBnyydaNqxTrplRibc/TbMCLFxAPahbTMeFUm:fy8uHJlAngqhr4YTbMCLFqihXHFUm
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral13 behavioral14
- Target
  ClearTrack.sh
- Size 64B
- SHA256 c0ff6a3d5e0041ec29c1ea7c5a5f1c55db4b9cdd1edf74286707c864c4bec7f7
- MD5 30b5fbc6df9c88a586d48e6939feef9f
- SHA1 db6c89575e1bee61e1930349e60f3f1c0113c2d8
- SHA512 dbf2d0d8941de3b66df27ed2b5e40d5c10a150752c6ce22ea3c83f5858dc513d02eca26fa9d4d9f6aff2bcc7f128f56e6b6aea9cc88624fd12ed8510a2122969
- MD5 SHA1 SHA512
Score

3^/10
behavioral15 behavioral16
- Target
  sourceCode\cleartrack\ClearTrack.bat
- Size 577B
- SHA256 22aa094891ad110c9ec7cb143ea18a5b60f22af3e440081223c26e24e885ad60
- MD5 fa2c85c6ba7d10a910c3b2d0870bb79e
- SHA1 3fc5b53360b665800bd98ff284b1a18a16bc66bb
- SHA512 9c4bb85be39d20ef9547631fda759669cc52cb4154183389cfd6a6b80fb5bc5e18dd42877e31653b8779ce9851c7499b51066276500b10a1ae75841f6f9fc33b
- MD5 SHA1 SHA512
Score

1^/10
behavioral17 behavioral18
- Target
  sourceCode\cleartrack\ClearTrack.sh
- Size 64B
- SHA256 c0ff6a3d5e0041ec29c1ea7c5a5f1c55db4b9cdd1edf74286707c864c4bec7f7
- MD5 30b5fbc6df9c88a586d48e6939feef9f
- SHA1 db6c89575e1bee61e1930349e60f3f1c0113c2d8
- SHA512 dbf2d0d8941de3b66df27ed2b5e40d5c10a150752c6ce22ea3c83f5858dc513d02eca26fa9d4d9f6aff2bcc7f128f56e6b6aea9cc88624fd12ed8510a2122969
- MD5 SHA1 SHA512
Score

3^/10
behavioral19 behavioral20
- Target
  sourceCode\cleartrack\crimson.jar
- Size 200KB
- SHA256 ff0517842f20631668f5eb6c73549d0e716ccc33eb966929192ab1b720f2422d
- MD5 bad5c2ea1434205c6644f8c0e87cb210
- SHA1 31e3dac9777abfec809ad9315f8b5d283cd46c40
- SHA512 63e08eedbea154c5f952bf92e358a14baf3ee2d25e976c905ade90181ae79767b3a6979c1c0fa9f4b33046432d0cb311f281c9af0c4c47c5cd3bc84baf46b853
- SSDEEP 6144:sto/L/fBpM6nnB2svoxwjOYT8NIpiG7tt6VjLOe:s6jfBp5nnB25wyY4N/3jLOe
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral21 behavioral22
- Target
  sourceCode\cleartrack\jaxp-api.jar
- Size 26KB
- SHA256 f9e7ecfd4a0cb37539af19b10d3a7128c8173474c25fcdb1623ffacf4842fa91
- MD5 b50cb3270d4b89586d69d795f20e602f
- SHA1 732ef40aaafded74aaff26c4285e115c50fb87a5
- SHA512 57f6b895a4a2cc52f67c8d97dfe73217352291d2db3dad7f13fb414f9d2da16abb2ee01c01983592904bc1efb0639b286ba453f015e685162c0d543edebcbe99
- SSDEEP 384:QcjO2iqmiwOYMYY4ULYXZm+RBc4CsGz4o8pg+Lrw2KuxGAX2pZa29AgOF:9cq5wOYGrYXFBByTOGu0+F
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral23 behavioral24
- Target
  sourceCode\cleartrack\jlfgr-1_0.jar
- Size 111KB
- SHA256 faf4dcd25b962492e5c5a6a534ce3a203a69382cd150e9ac5a81ce481a47a536
- MD5 88b00348a6f398a034c4c3999c097f47
- SHA1 ca531553caad2d15ae5b5d4ec1a119ce8a14d70a
- SHA512 abd04ed40e57d182a8da82f2fcb2b4551e7130aac148017621a6d53eb1871042debb77bea2cbb2df668b9c15fc23c473bf96b706950cbcdee922865a7a25d449
- SSDEEP 1536:aZqzCLnlsGl4ZTKSPSVTcUP8dyQswoxswNg1F:asAnGyXQY0dyQ1utNg1F
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral25 behavioral26
- Target
  sourceCode\cleartrack\poi-3.11-beta2-20140822.jar
- Size 2.0MB
- SHA256 81bcbeed903c8ccac027a19c60e5d25cbf0d4f6add82ff2a4d4fd68974695bed
- MD5 8684856027bcdadad4f458e7c459f3e1
- SHA1 5b89faba0fd879a6a7eca16e81a47a2fd008738a
- SHA512 4148ff5077667dded1dcbb97e46a623f155747eed399a07819690cba7a97b5efe500c2ecbb9a286acf371a14ceccb9da5e80a0d9ff824f5d8126bde8a8b78055
- SSDEEP 49152:yhlliBnyydaNqxTrplRibc/TbMCLFxAPahbTMeFU8+:AlAngqhr4YTbMCLFqihXHFUB
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral27 behavioral28
- Target
  sourceCode\cleartrack\sax.jar
- Size 31KB
- SHA256 bb6ad8a4d0b3613b7a1ee1aeef638dbaf867adfc2d02a9d7de80a0a8b026c97e
- MD5 8edd935cd64f2e8be0875d831a99057d
- SHA1 045f6707e833423dbc5a20a551da09c7d5213430
- SHA512 ab7ac73dd01063eb2310671e51bb6c7d176f58258f787a09c0970023113f118443ed6a449910c1f9f2aa06a05ef2b5506bc6209e7a108e4212f750b1c3a1e576
- SSDEEP 768:dCcSWggbYaIAPBiYOUR2oqvqlQljLrdCD4S:dy/APIYOUEfb1wB
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Modifies file permissions
  discovery
behavioral29 behavioral30
- Target
  wiki\Render\717139\717139.html
- Size 474B
- SHA256 38767e5feef0df6f55eaa6ede66a04dfe829ef21c4a658aafeb7a62a6754f215
- MD5 3f16093c8da0606d6e57fe74b51fe379
- SHA1 0a18e4c6b2e1df671ea5fdf2f6727787c83d94bf
- SHA512 2ae1ba818670dbb309b3817ab8d86ed2712305762fcdec7e5c398d916c9b5b368619dd5320504302cb309a1c735f265ef98fd84f902dc2561ae3306a203482ce
- MD5 SHA1 SHA512
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Modifies file permissions

Checks computer location settings

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

Modifies file permissions

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32