331c4b65cc3859aabcf21d012e8e7e89ae68a591de66e1b61064b3263694ebe1

Sharing

Copy URL Twitter E-mail

General

Target
7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118
Size 9.9MB
Sample240528-g7a2eahc5y
SHA256 331c4b65cc3859aabcf21d012e8e7e89ae68a591de66e1b61064b3263694ebe1
MD5 7c0231eb508e6f8ad60288a61b4212c4
SHA1 4150458566dab48108535f3a32e6ffe4f1a2a92c
SHA512 05c623a3529c98fb2badebf627d06d019010b475415670d37e4545cdffa23912a20a321f47d555c2e39c837211b33c129662767ed287921af8b4b8db8484f9de
SSDEEP 196608:uYSpn6L1iqCTZV2AopAVzPtDaRyry6DG/eik/anX7+Jol1LnAP6XVh:HU6L1wDFomBi6y6imV5JWhE6XVh
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118
- Size 9.9MB
- SHA256 331c4b65cc3859aabcf21d012e8e7e89ae68a591de66e1b61064b3263694ebe1
- MD5 7c0231eb508e6f8ad60288a61b4212c4
- SHA1 4150458566dab48108535f3a32e6ffe4f1a2a92c
- SHA512 05c623a3529c98fb2badebf627d06d019010b475415670d37e4545cdffa23912a20a321f47d555c2e39c837211b33c129662767ed287921af8b4b8db8484f9de
- SSDEEP 196608:uYSpn6L1iqCTZV2AopAVzPtDaRyry6DG/eik/anX7+Jol1LnAP6XVh:HU6L1wDFomBi6y6imV5JWhE6XVh
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 78012f560bb917218435f4b3ef2e3491bab15647e11ccb90bc117731181134c4
- MD5 5d195f1ac9869c208f6c02a5bde6f9c1
- SHA1 a8ec993a12708572ca8ca3d1fcbdc25230bdaf10
- SHA512 1f6a2e909e3a7188f24758715cdc7c9d8c17450a67c37cc74487924b00d5402c125ff8ec27b42038e20b560016f086b05133bf2bd04e670a1c46fa38c1b20672
- SSDEEP 192:C4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjYK72dwF7dBOne:jn3T5KdHCMRD/R1cOnrjY+BO
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 88cebbf8bad719d06709e9e29c39d1abe3325ae26f8d65c101e50df3afdd9057
- MD5 c365c5ff6418efae5fe288bd0419fa5c
- SHA1 62cecd954ef5645eeeeae44b05a29fc4a5fd5355
- SHA512 06dfc1c25eccef1a1a43afa8cf965e08bef75a531c94a09dc9aaaa01d3eff8d91acd85bb9621fec8af48957d5b89bbb711326f99a45216517a4c6b35ed893564
- SSDEEP 96:ygiqVPb3X8K8Kdr3gEq6nNdMk6Qiw290+q6LDtJ1tm3hhEl7y:ygiqVPgK8K9eIdE9B/tChg7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1
- MD5 fbe295e5a1acfbd0a6271898f885fe6a
- SHA1 d6d205922e61635472efb13c2bb92c9ac6cb96da
- SHA512 2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06
- SSDEEP 192:yPtkiQJr7V9r3Ftr87NfwXQ6whlgi62V7i77blbTc4DI:N7Vxr8IgLgi3sVc4
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 11adf8916947b5a20a071b494fa034cf62769dcc6293a1340b29a5bb29ac8e87
- MD5 7836f464ae0102452e94a363b491b759
- SHA1 59909a48448b99e2eb9cd336d81d60764da59f31
- SHA512 5ed63eefa1b3b3caad4cb762ccb8419c05bcad3da3a7415235cda2d2a1f79eb018503ca30a0a92d6b72160327decea9a70c48e0c28de94dd67303d4aea4a02db
- MD5 SHA1 SHA512
Score

3^/10
behavioral10 behavioral9
- Target
  Uninstall.exe
- Size 333KB
- SHA256 22a9cb8b4084439cbbe7bd8640a6f42fcc348adf8351e37be9443e833fa8a89e
- MD5 20b85a50d0d0f299a49dd5c2d8ad67a3
- SHA1 5d6f563aa45adace8c6934cef7d3f60ff29a2f38
- SHA512 502d99d9e6bf53cbeeec699abb9fda8f66ddcbe5785aa0d99d826c32e3b6d6c5f98add31f8674b3c0d856e97a85786cc354938dcae68cb0bbb66f58630e78386
- SSDEEP 6144:pwN+CPA7aIXBdtsXXxio8mmiX5V0yPO0JwyWAAtt96pU+muTcG:wFo7avXXymmiX5VVO06AGqbT5
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral11 behavioral12
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 11adf8916947b5a20a071b494fa034cf62769dcc6293a1340b29a5bb29ac8e87
- MD5 7836f464ae0102452e94a363b491b759
- SHA1 59909a48448b99e2eb9cd336d81d60764da59f31
- SHA512 5ed63eefa1b3b3caad4cb762ccb8419c05bcad3da3a7415235cda2d2a1f79eb018503ca30a0a92d6b72160327decea9a70c48e0c28de94dd67303d4aea4a02db
- MD5 SHA1 SHA512
Score

3^/10
behavioral13 behavioral14
- Target
  bin/api-ms-win-core-console-l1-1-0.dll
- Size 18KB
- SHA256 9f3608c15c5de2f577a2220ce124b530825717d778f1e3941e536a3ab691f733
- MD5 e5912b05988259dad0d6d04c8a17d19b
- SHA1 724f4f91041ad595e365b724a0348c83acf12bbb
- SHA512 c270a622d7887f4c97232ea898f5380459c565817f0d201cdb081ee82e3002b6e6248753a68da896d3b1327f93e8e8cb0ca0dcaeef324f610e0a1c7b542c6492
- SSDEEP 192:PaW1hWiZqe8Cjdks/nGfe4pBjSYqW/nW5RKTt3E2sVWQ4GW5rYZpqnaj71nxPI45:yW1hW4r1m0GftpBjQm3SllndaVrQ2W
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15
- Target
  bin/api-ms-win-core-datetime-l1-1-0.dll
- Size 18KB
- SHA256 3b68d7ab0641de6b3e81d209b7c0d3896e4ffa76617bbadd01eb54036cdd1b07
- MD5 16789cc09a417d7deb590fffe4ed02dc
- SHA1 4940d5b92b6b80a40371f8df073bf3eb406f5658
- SHA512 19e4f086cc2137ee60316b0736b3c6b3780578896df9a826edfe004bb74bee8e051c511a84d8a7ea278a5f47c82b9c955394f629ab0bb0740ecb51293d9be7b7
- SSDEEP 192:aUW1hWi8dsNtLxCjdks/nGfe4pBjSYvQF0RW5RKTt3E2sVWQ4GWsTJsqnajkZtT6:HW1hWfsngm0GftpBjmtm3SglmTok6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral16
- Target
  bin/api-ms-win-core-debug-l1-1-0.dll
- Size 18KB
- SHA256 55574f9e80d313048c245acefd21801d0d6c908a8a5049b4c46253efaf420f89
- MD5 9476affaac53e6e34405c4001f141805
- SHA1 e7c8a6c29c3158f8b332eea5c33c3b1e044b5f73
- SHA512 f8e3476a09d888caebd50da0ea2debc4006004e72af677919413655ab4595622cac524f1bc6c13406ee341ae0052a19ed83826ad530f652e73b2c65d4fa65680
- SSDEEP 192:2W1hWi9cvHCjdks/nGfe4pBjSYLky6b+W5RKTt3E2sVWQ4GW2y9jqnajXagRbG1d:2W1hW+Qim0GftpBj81nm3SMlDCED6
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral17
- Target
  bin/api-ms-win-core-errorhandling-l1-1-0.dll
- Size 18KB
- SHA256 b3715112a7ca4c6cc0efee044bd82444d3267a379e33a3ec118d87e75604204d
- MD5 a5883c68d432f593812ab3b755b808db
- SHA1 51cbb7ba47802dc630c2507750432c55f5979c27
- SHA512 27153e29e99a905fa4c8b3ede078644a3a3f29fdf7b98e387e39c5c60444e326c92afd74da8fee225f7ddf39724a0daef68ba238f3cc64fb7860172b8f29d79a
- SSDEEP 192:8mxD3uLW1hWioedXACjdks/nGfe4pBjSYTdvW5RKTt3E2sVWQ4GWGCWkqnajTWOj:8BLW1hWeXRm0GftpBj8m3SclgCohax
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral18
- Target
  bin/api-ms-win-core-file-l1-1-0.dll
- Size 21KB
- SHA256 56de091efe467fe23cc989c1ee21f3249a1bdb2178b51511e3bd514df12c5ccb
- MD5 241338aef5e2c18c80fb1db07aa8bcdf
- SHA1 9acbeef0ac510c179b319ca69cd5378d0e70504d
- SHA512 b9fd37f01a58594e48fa566c41827b2b9499605d9e55c2178e83ee41c8c5f50a4df2c85efea94ca586ea0ea4a6d984ebb7ca2193e9306fcb853b147b2c76bc2d
- SSDEEP 384:TBPvVXcW1hWYDzDm0GftpBjrm3SXjltFpx:VPvVX/TViNZ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19
- Target
  bin/api-ms-win-core-file-l1-2-0.dll
- Size 18KB
- SHA256 322d963d2a2aefd784e99697c59d494853d69bed8efd4b445f59292930a6b165
- MD5 49c3ffd47257dbcb67a6be9ee112ba7f
- SHA1 04669214375b25e2dc8a3635484e6eeb206bc4eb
- SHA512 bda5e6c669b04aaed89538a982ef430cef389237c6c1d670819a22b2a20bf3c22aef5cb4e73ef7837cbbd89d870693899f97cb538122059c885f4b19b7860a98
- SSDEEP 384:aW1hWF5OZkum0GftpBjjNWm3S0ZlmTof1:JKoViqi1
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral20
- Target
  bin/api-ms-win-core-file-l2-1-0.dll
- Size 18KB
- SHA256 1ea267a2e6284f17dd548c6f2285e19f7edb15d6e737a55391140ce5cb95225e
- MD5 bfffa7117fd9b1622c66d949bac3f1d7
- SHA1 402b7b8f8dcfd321b1d12fc85a1ee5137a5569b2
- SHA512 b319cc7b436b1be165cdf6ffcab8a87fe29de78f7e0b14c8f562be160481fb5483289bd5956fdc1d8660da7a3f86d8eede35c6cc2b7c3d4c852decf4b2dcdb7f
- SSDEEP 384:eVrW1hWbvm0GftpBjzH4m3S9gTlUK3dsl:eVuAViaB/6sl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21
- Target
  bin/api-ms-win-core-handle-l1-1-0.dll
- Size 18KB
- SHA256 8ee2de377a045c52bbb05087ae3c2f95576edfb0c2767f40b13454f2d9f779de
- MD5 cce27ff9b1e78b61955682788452f785
- SHA1 a2e2a40cea25ea4fd64b8deaf4fbe4a2db94107a
- SHA512 1fcec1cd70426e3895c48598dfc359839d2b3f2b1e3e94314872a866540353460ec932bf3841e5afe89aa4d6c6fac768e21ae368d68c2bb15f65960f6f5d7d5b
- SSDEEP 192:yW1hWBJ9M7tOZk7Cjdks/nGfe4pBjSYj+a2W5RKTt3E2sVWQ4GWJ9xqZsqnajkZ9:yW1hW+5OZkum0GftpBjt7m3SlGlmToC
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral22
- Target
  bin/api-ms-win-core-heap-l1-1-0.dll
- Size 18KB
- SHA256 87a5c5475e9c26fabfead6802dac8a62e2807e50e0d18c4bfadcb15ebf5bcbc0
- MD5 cdc266896e0dbe6c73542f6dec19de23
- SHA1 b4310929ccb82dd3c3a779cab68f1f9f368076f2
- SHA512 79a29041699f41938174a6ec9797faf8d6bf7764657d801cb3af15c225f8eab0135d59cfa627bd02dd7459f7b857d62299e4d082586ce690627ebdf1267ebb21
- SSDEEP 192:fZlgW1hWiR+49Cjdks/nGfe4pBjSYBPq+W5RKTt3E2sVWQ4GWDG2Oqnajd2si3TT:hlgW1hWP4wm0GftpBjVsm3STlM/
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23
- Target
  bin/api-ms-win-core-interlocked-l1-1-0.dll
- Size 18KB
- SHA256 5cd00ff4731691f81ff528c4b5a2e408548107efc22cc6576048b0fdce3dfbc9
- MD5 39809cc5dabf769da8871a91a8ed9e69
- SHA1 f779cdef9ded19402aa72958085213d6671ca572
- SHA512 83a8246839d28378c6f6951d7593dc98b6caa6dbca5fbd023b00b3b1a9eba0597943838c508493533c2de276c4d2f9107d890e1c9a493ee834351cff5dfd2cab
- SSDEEP 192:CW1hWiRnedXACjdks/nGfe4pBjSYC6rSW5RKTt3E2sVWQ4GW+60yqnaj/6g6dqpl:CW1hW3XRm0GftpBjl7m3SOLltFpU2
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral24
- Target
  bin/api-ms-win-core-libraryloader-l1-1-0.dll
- Size 19KB
- SHA256 8e01eb923fc453f927a7eca1c8aa5643e43b360c76b648088f51b31488970aa0
- MD5 5d5fae1a17961d6ee37637f04fe99b8a
- SHA1 47143a66b4a2e2ba019bf1fd07bcca9cfb8bb117
- SHA512 9db32ec8416320dcb28f874b4679d2d47a5ae56317fdc9d2d65ebb553f1d6345c3dd0024294a671a694337683dd4e77254595a9cdbfe115c80d0ef53516d46aa
- SSDEEP 384:KvuBL3BYW1hWp5OZkum0GftpBjPJm3SyAlJrqsK:FBL3BTioViH+ElK
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25
- Target
  bin/api-ms-win-core-localization-l1-2-0.dll
- Size 20KB
- SHA256 a07cc878ab5595aacd4ab229a6794513f897bd7ad14bcec353793379146b2094
- MD5 588bd2a8e0152e0918742c1a69038f1d
- SHA1 9874398548891f6a08fc06437996f84eb7495783
- SHA512 32ffe64c697f94c4db641ab3e20b0f522cf3eba9863164f1f6271d2f32529250292a16be95f32d852480bd1b59b8b0554c1e7fd7c7a336f56c048f4f56e4d62f
- SSDEEP 384:XOMw3zdp3bwjGjue9/0jCRrndb6kW1hW85OZkum0GftpBjcqEm3Shupl4aRGWa:XOMwBprwjGjue9/0jCRrndb0noVialbj
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral26
- Target
  bin/api-ms-win-core-memory-l1-1-0.dll
- Size 18KB
- SHA256 c2e887a17875d39099d662a42f58c120b9cc8a799afd87a9e49adf3faddd2b68
- MD5 6def20ed13972f3c3f08dba8ecf3d6cc
- SHA1 9c03356cf48112563bb845479f40bf27b293e95e
- SHA512 5b4d2b1152bed14108dc58d358b1082e27defd1001d36cd72ec6f030a34d6caf9b01c3c1dd8a9ac66d1937fcf86a6fe3469ac93b1e76d933a8f4b51c1f782f65
- SSDEEP 192:E8W1hWiEUcvHCjdks/nGfe4pBjSYY3iW5RKTt3E2sVWQ4GWRRhbOqnajd2si3Hv:E8W1hWXUQim0GftpBjMnm3So3ylMHv
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27
- Target
  bin/api-ms-win-core-namedpipe-l1-1-0.dll
- Size 18KB
- SHA256 593fa2aa2474508ad942bbaa0fdc9a1badd81c85b0dff1c43b90a47c23ad5fb7
- MD5 a056d4eeaae37deab8333dcc4c910a93
- SHA1 cb59f1fe73c17446eb196fc0dd7d944a0cd9d81f
- SHA512 c2f811994182ef51d0c011c19336179da69357e5f284f787bcdb54f90c32768a959232a477534f7e62cd3d71a048a13e91b20042e2fe6ab108d606c7c8df9255
- SSDEEP 384:eW1hWU5OZkum0GftpBjxKvm3SQTlUK3dsDT:1noVimvf6sDT
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral28
- Target
  bin/api-ms-win-core-processenvironment-l1-1-0.dll
- Size 19KB
- SHA256 ea2972fec12305825162ae3e1ae2b6c140e840be0e7ebb51a7a77b7feeda133a
- MD5 f3b4ab35a65a8d938c6b60ad59ba6e7f
- SHA1 2745259f4dbbefbf6b570ee36d224abdb18719bc
- SHA512 a88afb66311494d6c15613c94555ba436cd2f75e11a49a448c9c6776dfba24cda25a44792a1e8b3e680c1ad3ad0574b43ac2328c6e41ff0832139c94b066dbf5
- SSDEEP 192:XnW1hWioe8Cjdks/nGfe4pBjSY6ydpW5RKTt3E2sVWQ4GWwvcUV2HPqnajkSXt7m:XnW1hWE1m0GftpBjZ4m3SZ7MvlJrU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29
- Target
  bin/api-ms-win-core-processthreads-l1-1-0.dll
- Size 20KB
- SHA256 a1221836731c7e52c42d5809cc02b17c5ec964601631ec15a84201f423da4ac4
- MD5 5faf9a33bab1d39dd9f820d34339b3d4
- SHA1 50699041060d14576ed7bacbd44be9af80eb902a
- SHA512 73c25d1338df9aee5211fbb0e1b14e6bd853e31746c63bc46f44810622b09d52ee39b8e8a57c655da63d3d3d4025c2cba4d8673893d022417a2032ba3d935061
- SSDEEP 384:gWXk1JzNcKSIXW1hWEXRm0GftpBj1U6m3SddlmTod4V:gbcKSbxViZx8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral30
- Target
  bin/api-ms-win-core-processthreads-l1-1-1.dll
- Size 18KB
- SHA256 fe760614903e6d46a1be508dccb65cf6929d792a1db2c365fc937f2a8a240504
- MD5 d699333637db92d319661286df7cc39e
- SHA1 0bffb9ed366853e7019452644d26e8e8f236241b
- SHA512 6fa9ff0e45f803faf3eb9908e810a492f6f971cb96d58c06f408980ab40cba138b52d853aa0e3c68474053690dfafa1817f4b4c8fb728d613696b6c516fa0f51
- SSDEEP 384:dtUDfIeFrW1hWC5OZkum0GftpBjVzm3Sx56lgCoha6LDF:dteFuJoVijz1HB
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral31
- Target
  bin/api-ms-win-core-profile-l1-1-0.dll
- Size 17KB
- SHA256 9e98b03a3ca1ebabdceb7ed9c0ceb4912bb68eb68f3e0df17f39c7a55fada31d
- MD5 7028cf6b6b609cb0e31abd1f618e42d0
- SHA1 e7e0b18a40a35bd8b0766ac72253de827432e148
- SHA512 d035ccfd0de316e64187c18e6e5b36e14f615f872c08740ec22ef2c12d592e37d78ab154202926a56ab01d669eb5870dff651280a882d6bf2a700c43dcd25ac2
- SSDEEP 192:D4VW1hWc2TVCEmCjdks/nGfe4pBjSfMesvMW5RKTt3E2sVWQ4iWJBJ9qnajuZDAu:DyW1hWTvm0GftpBjosv5m3SKlUK3dsl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32