1e3fcd966e2d0b63e5a89dc82788da8225c85926dfdfd16c6712aea5b6a0ab28

Sharing

Copy URL Twitter E-mail

General

Target
807579e491f92a6eb21cdebede48329a_JaffaCakes118
Size 6.0MB
Sample240529-mqe7pace72
SHA256 1e3fcd966e2d0b63e5a89dc82788da8225c85926dfdfd16c6712aea5b6a0ab28
MD5 807579e491f92a6eb21cdebede48329a
SHA1 b9182c187f4ffaa988a42ccc346217f2665dd39f
SHA512 d019fb146729bcec0c356e70082f38559f25331863d9f08271a44249cc181cae08242421b4382efb5c76b5e6180103c153db13d1c90cb2df89399b6d28e065cb
SSDEEP 98304:xt4TugDOl1JINJ9yNISn2KnhSm3sxqDanLFcpXoAw90jGNoTQ0LG7N5uVuJj0d9u:U96l1aN2NLn2Kh3DanLFcSABKcQ7Z5om
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

persistence upx

Malware Config

Targets

- Target
  807579e491f92a6eb21cdebede48329a_JaffaCakes118
- Size 6.0MB
- SHA256 1e3fcd966e2d0b63e5a89dc82788da8225c85926dfdfd16c6712aea5b6a0ab28
- MD5 807579e491f92a6eb21cdebede48329a
- SHA1 b9182c187f4ffaa988a42ccc346217f2665dd39f
- SHA512 d019fb146729bcec0c356e70082f38559f25331863d9f08271a44249cc181cae08242421b4382efb5c76b5e6180103c153db13d1c90cb2df89399b6d28e065cb
- SSDEEP 98304:xt4TugDOl1JINJ9yNISn2KnhSm3sxqDanLFcpXoAw90jGNoTQ0LG7N5uVuJj0d9u:U96l1aN2NLn2Kh3DanLFcSABKcQ7Z5om
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10
behavioral1 behavioral2
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- MD5 00a0194c20ee912257df53bfe258ee4a
- SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDui.dll
- Size 1.7MB
- SHA256 adf2f657b39af4364df155ae84c1f8fddf863291f5ee7590856c6a4e96f148d3
- MD5 9e5a90292bf4b832773f17bdf3b67f26
- SHA1 4fedc3842c11e8c0053978dc0e23852fd5f6a910
- SHA512 0ab78a1faa992e9b5d4312f32c778ffa7ef9e7b50f0eaf833e5a5798362618b2b8055bef39dbb3fa250f7ce5874844b047e5aafdab4b659b78e7170a5d64a3bf
- SSDEEP 24576:OtljvGphGZy1WYRE01MvNvzLqC+I5LZDHIDoOtI4F7vTyBNUcMT2u5TyIsFn5o5e:OtBEt1402vfqFIxeI+7zSwTyD5g5mD
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 171KB
- SHA256 ce6fc1b521e64ea89f4532cbd74f06f85d21018ac5196b4f8169627926e40971
- MD5 a26d3887a69ea3e03c1cc4367494e080
- SHA1 e25b63467aadc27b2ee7daa93ea886c01f90025e
- SHA512 97e0343b5c1a478f886132d0a41737e41499485451fe2fa74fa3898ddbb15013ec424a84ecc19426d59e9b9870e283735d29ccba1d73d448e0f3ae320a741a7c
- SSDEEP 3072:vOyXSMpGO+JNP7FyE8R2TX/u5IiNNKdTmTfL5sY03tzZaq5bXi:rXSe76tByH87/aIiWdT6fL56tME
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  SearchCommon.dll
- Size 200KB
- SHA256 38d90eba406c9148ebd7585820caff53e1c39e62a2e989937ce2efe67661b14b
- MD5 17d1070d5ce79f3802a7baab2694f8d8
- SHA1 2f64823daccd1e6f8b51ec9ff04652eaee13f976
- SHA512 997e412f891d134f1826b9c9ba5d4233f4c89da0ca5ebd1cb9a5484e9eba374336ab8783d4610c75d9346c61d7f5d305b7619b1e5f651aa298348f4e707f9e84
- SSDEEP 3072:DIPBhOo4PbOIXA0HRlxrl8NaPwb9dv+fLJaAY7eL8LLSz2xr830I:spso4PyIXzENaPw5doL8AYqL8LLKwa
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  QuickSearch.exe
- Size 7.3MB
- SHA256 684324fd0ba4828e529a136b9765eede6fe205f2a3e2687fc06cb2c53a541f4b
- MD5 30d816b40e275937d8d2ebe5a81d62d9
- SHA1 ea37910d7300a40da3eb2028bfaaedf8210a45f8
- SHA512 6c60d008f8d27bd69c57a1d9714603833d994ec0ce43801c9ed7e788a17621e10355c35ff81e8efda4d93d29d31a8956033716f44458eb2108f11822a8a08941
- SSDEEP 98304:UGewY4zsG0k47yHKWXXKoPCNHE7LNzUfKFT+L9qZhrodtjYLM7uTxu5DLaNXDoD+:Up6xXdoGmf0SMZaPjYo7uTxu5D8DJD
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  Update.exe
- Size 193KB
- SHA256 3b26c0ecb57ccf158d45fdd711ca67a9532e50e12125bda4e696579bb7b4ca6d
- MD5 8bd30163838fbfa03f076b3af283a65d
- SHA1 1c11a756d891a3e7b012da4d72f1350dfd3c626b
- SHA512 871b21f2e9f18e8966d7cfe6161d76cbbc1ba95cac4bd99914d49ead37778671833611c972623c1f3e2b9a216a7320edff5e39d61a912fd5b33961c9be841c87
- SSDEEP 3072:4UjZFnny+89b8ZvsVWtRmlFHVKF/zZUyXFqETDd8KF7w5eDUwubDbJWLU/J:TFny+8yFsVzVKtU6qMd8+7wwUtbEy
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  htmlayout.dll
- Size 933KB
- SHA256 37598ecfb311f731db30c5e7c2afefa41a4040f55dad74d46f57e4b67d2acb6d
- MD5 fb041b43aaddddace716c0c283a306dd
- SHA1 63095594bbfdc40a32d67a41776349880fbf7db3
- SHA512 6aaaaae9840bf776424fe2815b4bb103ca6763a075eb2caa1f070af6bd88009146bb5cf11924e3b30725ccab7c37dbe81ed5630048769474d4edac13e393328a
- SSDEEP 12288:V+1nV/YptwPGQzD0lHKgQSRNVh7K2WcxcU+d545Cz9kxIjIS+jYZpD3Fpj+FRKfo:V+1V/wQzD0lH5VQ27MXmIJ5rD3D4OgdB
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral17 behavioral18
- Target
  uninst.exe
- Size 1.3MB
- SHA256 0cefed9345b825dcef7f2b7685e72d0ddd94c6ba0c3c878ada8533e70d8e2171
- MD5 b5db7f24798a0a3a19b6ca9b4732b4b6
- SHA1 e4d3d5fec28e6b3e36b31c6ca20384fe42f0a760
- SHA512 e93d8324e191bb84e6f58e968d6c024db92297f359c4ac4e732fe1123bcf478c4fd0c88e14e3eca555e31ed9c192a35becfa73ad6a773a50bb554ffc957ed888
- SSDEEP 24576:zKICuTZzVwI0GSTuDTYJxaaGmLJS1cJTD2r7IVFgmTQENUryaq2ulTyIrFn5o5AV:XCAtV13STuDkJxaaGl1cUXIjgfhGTyS9
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10
behavioral19 behavioral20
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- MD5 SHA1 SHA512
Score

3^/10
behavioral21 behavioral22
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- MD5 00a0194c20ee912257df53bfe258ee4a
- SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral23 behavioral24
- Target
  $PLUGINSDIR/nsDui.dll
- Size 1.7MB
- SHA256 adf2f657b39af4364df155ae84c1f8fddf863291f5ee7590856c6a4e96f148d3
- MD5 9e5a90292bf4b832773f17bdf3b67f26
- SHA1 4fedc3842c11e8c0053978dc0e23852fd5f6a910
- SHA512 0ab78a1faa992e9b5d4312f32c778ffa7ef9e7b50f0eaf833e5a5798362618b2b8055bef39dbb3fa250f7ce5874844b047e5aafdab4b659b78e7170a5d64a3bf
- SSDEEP 24576:OtljvGphGZy1WYRE01MvNvzLqC+I5LZDHIDoOtI4F7vTyBNUcMT2u5TyIsFn5o5e:OtBEt1402vfqFIxeI+7zSwTyD5g5mD
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral25 behavioral26
- Target
  searchshelp.dll
- Size 372KB
- SHA256 2e4ad6f9e1b72a9fdd341982d2c0726b5aafcc24629b1f7b45a8b773a36feb4a
- MD5 9dc0d7da7e13d1b57d21241f756e4178
- SHA1 b23692496fec97a1830d3bc0abfef2641ead81ef
- SHA512 984b88307ff58ba15ed3cf26eed71cd0170f49d1a71bcb800d0f39a750521f694a083dec9fdb859e9962609a1746a71878994f0da6737ba68f6e065b5e042d2c
- SSDEEP 6144:pYU2ZCSJXXwc55czraDN4bwzxUN0KLbp3CCeQavTBGmZFvU6:eVZCSJXhczryNuHaKLbpSCMvTEot
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

persistence
behavioral27 behavioral28
- Target
  searchshelpx64.dll
- Size 330KB
- SHA256 ebdc8e5757d6b1af90243e50f944ebbfd144861383c2ff3fe67ff6a64057d596
- MD5 088c76281c200260cd73e3e6725f4b6b
- SHA1 6531486f15ab066a7b1e30bfeeffd3a40b22f3c0
- SHA512 8ab3c6b986b967460296843727ac7300f3a5542c501565286c632d55bb7141b56d286e681ea49e3a1512743c205649cedc9e22649ac022690529d1c0b4c58696
- SSDEEP 6144:CVmve2hErB1A8H33aCpx1LTH0lD1a6skC3ye0Lqpe:CVmvevB1jNnxy/ge
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

persistence
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30