d428e48a77074d621d8a375f6130e3d85b82097d6d0cc90b030557388bb9b313

Sharing

Copy URL

Twitter E-mail

General

Target

7c351dbf294d5cd8f857e2b4e221d097_JaffaCakes118
Size

3.5MB
Sample

240528-jhdgcacd72
MD5

7c351dbf294d5cd8f857e2b4e221d097
SHA1

730b313820de60d5c33009d5d4ce39a94f80de5d
SHA256

d428e48a77074d621d8a375f6130e3d85b82097d6d0cc90b030557388bb9b313
SHA512

ead9f1a94c5c29ef7f1b57a495e5084ae7fc543c3f443d2f556b21affd04357a61be930f5c00137c7d0ce460a4b0a6b3c49fc68a8c0778af7aec42d605ed617d
SSDEEP

98304:CgzRkadMxzSucW3pYqtx68X+8KgOSVq9UpnB:Rua2dLcWSC68X+8KSQWnB

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  7c351dbf294d5cd8f857e2b4e221d097_JaffaCakes118
- Size
  
  3.5MB
- MD5
  
  7c351dbf294d5cd8f857e2b4e221d097
- SHA1
  
  730b313820de60d5c33009d5d4ce39a94f80de5d
- SHA256
  
  d428e48a77074d621d8a375f6130e3d85b82097d6d0cc90b030557388bb9b313
- SHA512
  
  ead9f1a94c5c29ef7f1b57a495e5084ae7fc543c3f443d2f556b21affd04357a61be930f5c00137c7d0ce460a4b0a6b3c49fc68a8c0778af7aec42d605ed617d
- SSDEEP
  
  98304:CgzRkadMxzSucW3pYqtx68X+8KgOSVq9UpnB:Rua2dLcWSC68X+8KSQWnB
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/FindProcDLL.dll
- Size
  
  3KB
- MD5
  
  8614c450637267afacad1645e23ba24a
- SHA1
  
  e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2
- SHA256
  
  0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758
- SHA512
  
  af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  4KB
- MD5
  
  99f345cf51b6c3c317d20a81acb11012
- SHA1
  
  b3d0355f527c536ea14a8ff51741c8739d66f727
- SHA256
  
  c2689ba1f66066afce85ca6457ecd36370be0fe351c58422e45efd0948655c93
- SHA512
  
  937aa75be84a74f2be3b54dc80fac02c17dad1915d924ef82ab354d2a49bc773ee6d801203c52686113783a7c7ea0e8ed8e673ba696d6d3212f7006e291ed2ef
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/License.rtf
- Size
  
  79KB
- MD5
  
  6b49cb824fc11edb01d0ee4dee1bd54a
- SHA1
  
  81291caac7aaad7a439b5f8564ca26b320732b03
- SHA256
  
  7d13c20e98677d3434ee1610b8f29d6b78b71026840d9434a298d8680ca649a6
- SHA512
  
  b06a655b590e5a201a394d7f982c02c515a741653f81cb28bbca5a20097e16f2f09a81aee1648a7b725cc584f04a77825e0c5b1b5bee578ca6a21ab0f4934a19
- SSDEEP
  
  768:iNt4l3sjvUxnJ4mbjWn9G6GXBKgGYUWwlC1xVbn:ngrQJn
Score

4^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/SkinBtn.dll
- Size
  
  4KB
- MD5
  
  e4ec95271ff1bcebab49bdfed6817a22
- SHA1
  
  2c03e97f4773aea80ecdb98a1482e5896fe4677b
- SHA256
  
  ee1c06692a757473737b0ebdef16f77b63afac864d0890022d905e4873737dd6
- SHA512
  
  771a527133806307a1b17b7e956d6a3c16e9bc675bf084b43204ae784a057dac2726dbf90645692876043a4e7365ba8825c167621fde4760c79cd84679e2aa3d
- SSDEEP
  
  48:iIf3aEDfeWm8JHFQbUrUPJJDFoetaxn/pFW3GNivz187eqzI/kMr8oX0Zbj:lv9Dfw8DQbhD2iaxn/PHmiNI/dQFZH
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/SkinProgress.dll
- Size
  
  4KB
- MD5
  
  cc037c4703d3ec257efeef2ce0a1a20e
- SHA1
  
  b3d6cc8f687a31fb2c1a5921a38de9429af20502
- SHA256
  
  888b32ecbc37ce67d4edc28d894cba0a4f4e2488cfc2212d1af011bd0bfe97ff
- SHA512
  
  120bfa0a68775bef04c1863023b0e73a41982284fb36da7f497fbb7d5ed8631ad02fa09951424d339f6fefaa90a17c12f949dd68bb33bad64b1b7cace489d2a7
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/WndProc.dll
- Size
  
  3KB
- MD5
  
  f0cb331dd4bd92a6ebce45e7cd1cf5ef
- SHA1
  
  b66ea0c10b08750295f2dc7c170b370402393214
- SHA256
  
  e7b3115fa2ce4a8fa09beeefa4fb634a474197f38a2854ce9be60d0a26016458
- SHA512
  
  7c33418f39b91ae0d4cc8b560f516bac293593eef539832815028878c2058bf1691c2d767a039cf312989839071f2f6f0b6d9d59835acdfff6b448bf1ffea271
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  c10e04dd4ad4277d5adc951bb331c777
- SHA1
  
  b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA256
  
  e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- SHA512
  
  853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP
  
  96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score

3^/10
behavioral17 behavioral18
- Target
  
  $_47_/Web/error.html
- Size
  
  2KB
- MD5
  
  9085af5c4c8fc9fc7c83ff132daf4970
- SHA1
  
  b91dc15b71fb30e923761b89c6a9ef85635bcf2d
- SHA256
  
  7dce7e40633ab511ea62e62943c71981e5e91eeb21ca98a1bcf5338bd3ceb3b3
- SHA512
  
  8465e6d1c5cca1e690b4c3889ffee61d2816c6fe04771fab75c9a463f73cf9bb2ae3e0b47aff9b9e30173b2d25d52bb9c4ccaf9d380bcf5d78a6e039e873722c
Score

1^/10
behavioral19 behavioral20
- Target
  
  Accelerator.dll
- Size
  
  306KB
- MD5
  
  091f0da49c9fe3f5903fa46638017442
- SHA1
  
  2c3627308d0741f4c517fdadbd58bbb0398518ad
- SHA256
  
  34c5416f4261f76103722ee86b9dcadc7ebddb2b4ee1d49a7eca914c2b343141
- SHA512
  
  e651a615a714822e4f036ca6dc79bc6a01a023f681a825f8d35b0cdd5293f80d51eb41bf14ecfb59f49cdbd8867df8e784118e1a504eebf394ca25c7987a63bd
- SSDEEP
  
  6144:I2GMn+qaIrAf4pd3DecSGUHmJYSJuXEj0j888888888888W88888888888I:D3+yt8SYiuc0j888888888888W88888g
Score

1^/10
behavioral21 behavioral22
- Target
  
  Basicsurvey.exe
- Size
  
  657KB
- MD5
  
  3a6f0999f9d48800ae51684b67a7bf1f
- SHA1
  
  41e29f6d9b8f2a548d22ecada8bbfbb339e99abe
- SHA256
  
  610fb271047b033fbf80f86fccef6d8bcbb6b5e1665d4abf5152d304a8c30930
- SHA512
  
  84facb4080cc43f3ff602b05086c8ba10ed24f1d2a31715b3758ae65b117273ddcdc8a6cb046edcb08f102765e6e3d15479d893e18b60d8e7c410529a6f03df2
- SSDEEP
  
  12288:MjkYOQrDtxKJX7evc1lL+OeO+OeNhBBhhBBH2DC6OoB9kSxLRE3Qs4TttG6Hdja:MjdOctxKJX7eClnC6NBJxLReQsCxdja
Score

1^/10
behavioral23 behavioral24
- Target
  
  BoxDoctor.exe
- Size
  
  950KB
- MD5
  
  4e517eb448d0eb90949858b9a51d93cf
- SHA1
  
  172e64d01266d150cbeb2fa539139b292f6b7440
- SHA256
  
  aaf894f315b4174e53f8b33f252006c7858b30c5cb540bedb20f6e0a6607f668
- SHA512
  
  aa95e229bae9ee2ed1ec525ac066b7718e4aea62a39ff9ea3c94f707a19610379289847f344ab665518108925a6693f8786a8845d1a2cd3bafe86ed59cad6ab1
- SSDEEP
  
  12288:WaqzXH+jQZG/EzXH+jQZG/EzXH+jQZG/0:7QXH+kXH+kXH++
Score

1^/10
behavioral25 behavioral26
- Target
  
  MouseHook.dll
- Size
  
  31KB
- MD5
  
  6e8a92fb9e6b8d4704bf243863cda92e
- SHA1
  
  c49f199a5aafab151350dad9edc924814e0acc14
- SHA256
  
  f3b7306448359dd8414cbfe18a84265459eb40844821b662de6f3bf33f1de17a
- SHA512
  
  2e3363403852ad7d744acf10f428cef31752563a1119c4875d1e031e5d0dd627ecf5b28cb39f2787bcd3e8a4eb06f8bf78969a05cbb03224a12f86b97bd008dc
- SSDEEP
  
  768:WHr98zW8XvCBcaxCYpGai292OK6ojvuerP:WL98zW8fCWac82OK6olP
Score

1^/10
behavioral27 behavioral28
- Target
  
  Socks.dll
- Size
  
  962KB
- MD5
  
  2326441ad2ca40c4e0dbe0ad81203a22
- SHA1
  
  e4749d6495b818d8331c340cdf916c5e317d9b6f
- SHA256
  
  800e2542b33fb1e28b4308359a5176ea99be96d483ed84de6477bcaeaad77036
- SHA512
  
  832907b845b21fec015a7460e9bb94cb5fb5f04b7f09519a816d85b2b8bd7f3b7e80d1719717e8c0b3258433bcef5654b9b39f35bde7af800d5821e0f1925199
- SSDEEP
  
  12288:yOVW7eBdym2J0MuHEysIk8zTFHFI+OeO+OeNhBBhhBBowQAbkLOD1+N2/KJKrvV+:y+1kFInzTtFewrkOD1+2SJKrvRdhy
Score

1^/10
behavioral29 behavioral30
- Target
  
  gamebox.exe
- Size
  
  2.8MB
- MD5
  
  b165f9c47b5ce6d45bdf892a3bc1bdcc
- SHA1
  
  17c112a2267deb9e84dcd20c6d9cc5018073eb4f
- SHA256
  
  31b07b764a2990629b0072e8d5148cfb8f731a38a13477629994e41d881c2130
- SHA512
  
  32134928bf1a1ddf9a0b4fa9c80c9bb43d28921edb074653cdbd721f91eef28f03bd8f9aa508f97d9adfcdd5447cff9a60c232064e3fd4375bba6d9386f1f7bb
- SSDEEP
  
  49152:vRLoo8J+cSPDzOKjTrJM/I31lQND4Aml8bee5WmL7iTPDTNXH+Set69mzSed:vJV2+cSr6Kjq/IAND91Ce5vXeXH+Su
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

T1542

Bootkit

T1542.003

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Pre-OS Boot

T1542

Bootkit

T1542.003

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Writes to the Master Boot Record (MBR)

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32