f9d2acad4a5c49a3657d785b1f6f8c23fee84605534cdb5029149e93c67ad875 | Triage

Sharing

General

Target

922d8918e08ca20ad51f79f06ccb4e68_JaffaCakes118
Size

469KB
Sample

240603-r9rgaaab5t
MD5

922d8918e08ca20ad51f79f06ccb4e68
SHA1

78e732d28cfb04ae3ed68dca4ac4c82c84e0802c
SHA256

f9d2acad4a5c49a3657d785b1f6f8c23fee84605534cdb5029149e93c67ad875
SHA512

ef54a144fc208099bd856ac9eade45ed14ac6d78910b568df4f0ae2dc539e8a39413c2059bdf06edceb4e54ec199661f6aab3bfd07e30214976650697d1921b7
SSDEEP

12288:uRlMuY2xrkIya9UTHZ8Iwh51YYOtG2xAa7oY:eZ4aA1WuYOt9AaV

Score

3^/10

execution

Malware Config

Targets

- Target
  
  zoom-builder/assets/js/builder.js
- Size
  
  67KB
- MD5
  
  808be63a595b6fbb17dece961305c7bf
- SHA1
  
  9639513fd96c5242613600c4a8f262b526062ba5
- SHA256
  
  bd9e5450d772825ae165fc4e00fbf724494ce9525e26d171ee4e7a85a584556a
- SHA512
  
  4f0ba7dd1f5744121b22981d189a96aadb22771793527616734b76b08f7524fb85d11ae7cb4e0583b242c66601dfa408320ce8fd93c28496f1e399c33d95f8e0
- SSDEEP
  
  1536:F13BdHi1DQ8aRlwbcC131tdcLalCTziat:HBAQ8axqtSagTziat
Score

3^/10

execution
behavioral1 behavioral2
- Target
  
  zoom-builder/assets/js/colorbox.js
- Size
  
  10KB
- MD5
  
  2c381fee3e12193d17c2ed14d2cbcffa
- SHA1
  
  c3d9e0d135b9d450dc9dcd55740b99ed82329e0a
- SHA256
  
  04267038608d360c78254e55ab98e75045067567996e7dc7f1501784718dabbe
- SHA512
  
  1e4a3f837e48018ec401f5a442d3413858fa835bff0cb232285f41476db6b75cf422b384cb5eb2754ed65556e2560764ff19972910d820c511b46d37d3b94353
- SSDEEP
  
  192:bTuzkO86HV1wjbpjFPK2Gqn9CbV1iv/tsRkUh/6fRtK+:GAuaRX99/tsC8MP
Score

3^/10

execution
behavioral3 behavioral4
- Target
  
  zoom-builder/assets/js/colresizable.js
- Size
  
  3KB
- MD5
  
  77e33595929de26f94bd0bf3a3f685b7
- SHA1
  
  92f607cec69f3b90172bd895faca8a0eba8fa02b
- SHA256
  
  7753b08ce24986598d690235224e68dfce03e6252b63ac9ddf9ac72ed19f224e
- SHA512
  
  d17a608d466a79a5117cf6529f7ce5178aec0acf24326203b31cf2baebb6c362efbbacc8cc52aab5cd881141ad78ab90114903c39bf901c1720d994022bd239b
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  zoom-builder/assets/js/fitvids.js
- Size
  
  2KB
- MD5
  
  e40ae3e6305a98b29726389cc9e706d4
- SHA1
  
  8a80237c78a1539c8a62cc5da16c3c320073ad7f
- SHA256
  
  adceae367145b5a8038f7378ae7d731da8005b1123d042b5d120a7abf3b0cce0
- SHA512
  
  b6f9e95b7d65ea89adc344f2edacae9cb61bf140b211103ec8a678583dff6207af2c8c548b715d9cfdbbe4e6afa3de4f0e19594a2dfa0d62567eca0792cb8183
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  zoom-builder/assets/js/jquery.cookie.js
- Size
  
  1KB
- MD5
  
  ea668fbe23feb13e6286448ef8238947
- SHA1
  
  405ab3834cc88cc90730113674ffb1782521b88e
- SHA256
  
  7b6af88ab6f5b8d6af3b4bf1fde8be6783d3e1936572948370347a520bf2568d
- SHA512
  
  cf701eed63c8a9998ffdf8af2eae2ed2ac0a741192b9aba702b41ef1130c37b535cc4dbadaa513332f20d47ddc6ce53bd01360b67066971320560b3c603b9591
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  zoom-builder/assets/js/pointers.js
- Size
  
  4KB
- MD5
  
  c444965ebee6520bcd8daa207a6b1727
- SHA1
  
  df77e0e1f6a48bf21bfc0fd75e7a0601bf4caae1
- SHA256
  
  e7a5a70a6445eaed85db90740c164e08054091f66703e65bcb6d37c379371cb6
- SHA512
  
  0a14d9e237eedfef3cbd216cc4b8606b0f32ef47917dc4a55d55c98d1dab16905a7f85bf7df394ed4cdbe5f269c857c801a05f046f78a5b1e88d43cea104d8bb
- SSDEEP
  
  96:rh6z20pj9rIE4vE3G5oyob034uBr4sL+0l:rh6ScIE4vEzjb034uVv
Score

3^/10

execution
behavioral11 behavioral12
- Target
  
  zoom-builder/assets/js/settings.js
- Size
  
  2KB
- MD5
  
  3c464dcd0da6ebb841557ce346fe3038
- SHA1
  
  9a36549bd2b3e8bcb1301803d35520c7fc24d5d3
- SHA256
  
  a2fa1910e2822392c2d5436d76acbc4742c0cf71254fe74ae2e79fec06403c51
- SHA512
  
  fa0e92e032563fed7e6dc5d37bf8e71c6a495f778162b2053d4ce747a075b7bd8dd4cb24835122e3ea72c1ea3c14f97badd4a4d2c829fb6fd948545e66e1e409
Score

3^/10

execution
behavioral13 behavioral14
- Target
  
  zoom-builder/assets/js/tipsy.js
- Size
  
  5KB
- MD5
  
  c1bc96ce95965401730c7118f373ffb7
- SHA1
  
  f7a3707ddde597f28214b092642b454f75faac1d
- SHA256
  
  e97653fc2dd8a49a8cf3a1a785d62d26b20327249eff8f169f8f2079a97f0cda
- SHA512
  
  6e375f7d64be76652e44c5df4e156ea1155dd1dd5ae5dc9cbdfe11ba285ca69a64bbf564724efd1511b5302811289c15f8682602f779f193bdd9bb3184b11c07
- SSDEEP
  
  96:JCPzusEKQSy4haP0twg5TM6K2u4oYgstXM/FsuGWZNx:s6+Hz5RxnBcYcub0
Score

3^/10

execution
behavioral15 behavioral16
- Target
  
  zoom-builder/classes/settings.php
- Size
  
  21KB
- MD5
  
  9fcd2ecca55785bfdb07c9559df08c76
- SHA1
  
  03e07bd22d0a3b78b00486d42944af3f1c74c3a2
- SHA256
  
  53c18675b2d8417743079276c745afea9bd7483a0552b6a53dedde934bb56bbf
- SHA512
  
  15f9fb2a9e6fe1cd17a657c64b17990e9d46ab721740814a516b852936971b7d81e8f9c2ae9f31029bbdf2c918af1cf3dd75e3d4d895b1801149d740fc399216
- SSDEEP
  
  384:aODteT6DlltnMXWbybUEj6a7ilvta4ZjbGfiR7JQCeQbJTE3euR5ZekMEMUIAPf1:WXWebKlvtayjbBHjbAR/8U4SVr
Score

3^/10

execution
behavioral17 behavioral18
- Target
  
  zoom-builder/modules/call-to-action/call-to-action.php
- Size
  
  17KB
- MD5
  
  8bf196c8d2175a88f1b6e20660324924
- SHA1
  
  34d42fbdca7a1444c11279edc345d4006ec794f1
- SHA256
  
  69906d35ee37988401d8baa61c81889430e6cb3f0d1741d82fa80aa4d4b0140e
- SHA512
  
  c9e7bba26ca9f46fb02d2d99cbb5904f86420e3a2a6e301d92ab3324f94a66f2c99b5e1e79020e05b778f6745d9a144b9900c88c2e105dd18c9ed632fe6afbc8
- SSDEEP
  
  384:4E8ltbgCHy5K6N3YKbBKnvEBJ5bUDQUtfv8wtm+S4:4Eg8YrEaJ8wYc
Score

3^/10

execution
behavioral19 behavioral20
- Target
  
  zoom-builder/modules/contact-form/backend.js
- Size
  
  8KB
- MD5
  
  3007c70c5010741f20ece5e934658f4a
- SHA1
  
  ee33949e2f8fe1f7c713deafad425f4ec9a003ae
- SHA256
  
  a1b7bcef0c5bb7eadf3bee6d6d18fd5dced1ba50d4cee88b12196cac0a3f78e8
- SHA512
  
  e26f89bf71344f459cc732585ae58bdba7c6a9423dbf69b8a227f5c3d6ae4dfd08eb2720eb753ab59812fb3128154517ccb8ab36469ddb33f13421182fe6a640
- SSDEEP
  
  192:Sxtpq6d/ekhMamuBD7ybfwIxDOFhuKov1BIamx5s5:Sx35BZezwIQFhuKov1BIrxa
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  zoom-builder/modules/contact-form/contact-form.php
- Size
  
  30KB
- MD5
  
  1bfc232fdb56cbc981ae1605bfd8f3bf
- SHA1
  
  a6b0c1c28836b7c1d6cdaa4f3f1c2f1740097a64
- SHA256
  
  40d214c67c3e490f8fcb3e7a9d20c97d878a06f74a772252e5adebff40463ee4
- SHA512
  
  ec07bf4aa204d908aa483ef5f476c7a1b8950c3006f17b6eae60e79744bc5d60e7a5b2a67afdf36332cbded26004d2b5b6e0cd3d178504b09651fd76d926a925
- SSDEEP
  
  768:TE0QBv+R814EcPaA0jUEmcBvagsjwXL5+VpS4saJ:pQ1+R814EcCAfEDBvpDXL5+VpS4sq
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  zoom-builder/modules/contact-form/frontend.js
- Size
  
  4KB
- MD5
  
  1a00e9636670e32a75a84092dd4e33d6
- SHA1
  
  9eaeb6e7d5e1cbc2988567e0eb8fc5960fddeb15
- SHA256
  
  80e88794e9bca0e8ec5afc08cb81e457a462456dddbdbfd73620bcf6d22b498f
- SHA512
  
  233d76e4580c9c30697d67c125312e2dd1fae0673105ef4d513cd004103751cf71ce0f7f797c76e9a8cef7e639d023133311a93a8300aea0faf42214100f4d22
- SSDEEP
  
  96:15pWofo8j6rOU/CFgFB5XlC288sl8W7vUrMLF0pkaE:lWjJ5Xlel8HE
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  zoom-builder/modules/feature-box/feature-box.php
- Size
  
  37KB
- MD5
  
  49ec92c614673f3bd537010f6faa31ce
- SHA1
  
  cdbcbbf9a8b827665da84f887a04712b9b697919
- SHA256
  
  59f302b53a050c81f9c668f9f2f830d5bf1cc75aa1f0e0aa7ff73155ff140719
- SHA512
  
  5ac534d5e9b80c81cff4454a02c79ad66aa8d42189facbf1e83e8300bdc993e9f86788610e2fda533060579a9384d3e2f1132a0a6e3f507102428f4f88ed8af3
- SSDEEP
  
  768:QMyNp8l6u5AKd9aFqokmPl+NYnYPsFdF1FyFoFRFFF+F2F5:QMS8B5AO9aFqETfUa7jwMX
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  zoom-builder/modules/media-slider/caroufredsel.js
- Size
  
  53KB
- MD5
  
  72805fb6fa518285d00f3721f2eeed88
- SHA1
  
  ee393d37abf534eb94bdbfe72b15e4d07a26ef12
- SHA256
  
  e9cdbebb93c076de37e208742a252641c50a5a527efcee16fd18dff10f237e36
- SHA512
  
  e538659e8fccbf95bc779cfb784b8e6a1119de75d9d2e02e3a07fc9bba7bfbff4bb64cedf6c9fdcfab11f3b9bff5ba96f6faa9cb052aeb961e356d0cbb35bd07
- SSDEEP
  
  1536:OYQjF+MMjhPIkwFrHJc2Pyx9b2O68HOkXxEXy7l1pT9Hpyn220DTPRZmtxNpNxCD:s7DY9bfDjv9Hpyn8CmcrM4ODpZ
Score

3^/10

execution
behavioral29 behavioral30
- Target
  
  zoom-builder/modules/media-slider/colorbox.js
- Size
  
  10KB
- MD5
  
  2c381fee3e12193d17c2ed14d2cbcffa
- SHA1
  
  c3d9e0d135b9d450dc9dcd55740b99ed82329e0a
- SHA256
  
  04267038608d360c78254e55ab98e75045067567996e7dc7f1501784718dabbe
- SHA512
  
  1e4a3f837e48018ec401f5a442d3413858fa835bff0cb232285f41476db6b75cf422b384cb5eb2754ed65556e2560764ff19972910d820c511b46d37d3b94353
- SSDEEP
  
  192:bTuzkO86HV1wjbpjFPK2Gqn9CbV1iv/tsRkUh/6fRtK+:GAuaRX99/tsC8MP
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32