4824b32e77aaa215c6497d16df9c022feddd5162fc8a3aa67a609150d91b8e92

Sharing

Copy URL Twitter E-mail

General

Target
93182ebc2cb2ae696c097d85759dfed8_JaffaCakes118
Size 16.2MB
Sample240604-ajw6eaed2w
SHA256 4824b32e77aaa215c6497d16df9c022feddd5162fc8a3aa67a609150d91b8e92
MD5 93182ebc2cb2ae696c097d85759dfed8
SHA1 079b4157ebb976d0f26630285f3e0cc10b126da1
SHA512 d6ade9a5ccbcdfdd9311ee06ced7097ea1558cffb796a22d943d1363750c9dfbf246535e1e36b22e255a9c379d375345aca65c4ed0c1f584acd79e8951cb760e
SSDEEP 393216:b+zq2PjlG6Oy86+4kWIDoGIfZaoizv3joCwKRYvOVa30IEd:K+oG6DEWugpuMC74kIEd
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

discovery persistence

Malware Config

Targets

- Target
  93182ebc2cb2ae696c097d85759dfed8_JaffaCakes118
- Size 16.2MB
- SHA256 4824b32e77aaa215c6497d16df9c022feddd5162fc8a3aa67a609150d91b8e92
- MD5 93182ebc2cb2ae696c097d85759dfed8
- SHA1 079b4157ebb976d0f26630285f3e0cc10b126da1
- SHA512 d6ade9a5ccbcdfdd9311ee06ced7097ea1558cffb796a22d943d1363750c9dfbf246535e1e36b22e255a9c379d375345aca65c4ed0c1f584acd79e8951cb760e
- SSDEEP 393216:b+zq2PjlG6Oy86+4kWIDoGIfZaoizv3joCwKRYvOVa30IEd:K+oG6DEWugpuMC74kIEd
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10
behavioral1 behavioral2
- Target
  $PLUGINSDIR/FileInfo.dll
- Size 121KB
- SHA256 8f7d75e4ea90962c8438785b8f32b0069d0402f8befed741a3a98391e478b090
- MD5 80fe0f9702d94bb88515f42bf8a4ed34
- SHA1 7af08fa14927a2f5ec7121c5adb7bf98514696d9
- SHA512 387123c2577e44db41d297c5dc30848d6a733fd233798de642f831b81aada5bb2bd0fa334b3a599468330eeb66efa9655a4fb5c8797b1cfc13a87d9b5d29a696
- SSDEEP 1536:UPbjnSKdEa7gtJzYAvqIe6zq204iuX+RJmrcpOzsWjcdGf+mdJuMczQ//5h:UP9pMvRvnRq2NzqO86+mdJuMczQv
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/RCWidgetPlugin.dll
- Size 5.2MB
- SHA256 2d158ba1e557aff957947ceb927183d1148acd8f54a0029083be619e2844cf36
- MD5 713c4b658cbbef6e7ca8c298689b2281
- SHA1 f4d4d5d9ed19786abebd4f028dbcabd563895e35
- SHA512 b69f0e1748dd5f3c4497dca21899826648d09f2979ec608e69a04b9a3fc1fac1972149f2fa50503c80f3ff8e13456b50cf70e31b17fe5cc2fafe1a5fd1b26955
- SSDEEP 49152:r4dxo8I4F/hfRumdzTxx81C+H0P3UekweGRgpS1CzHrPiWDhpPQEpWuyXoiLdaur:cdxoijJphDkwopS1gTDjlU4iL0iKjbGH
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 29KB
- SHA256 f8d7c15bce6ccf0c3f230ef8e2499f179bf4fe7163fe524177ce53514eab72f3
- MD5 cd9c08ef7483118c960b594afe2ac37e
- SHA1 912394b4f53a6d9468c6cf58c266b1d6342df54e
- SHA512 d3949e1d54019cf1bd6ad5caf9d30442c50f755f3c2afff4d97234609caa773a7820e14bf35502c98129d93e3041f1e065d719f90fc4e84058332601014a561a
- SSDEEP 384:CFx8XpXIgtyMKJnoHLJ84QN+pkEkpQZfUXVPr/ceMWJ8H6pkEkhRK5RwV0/XzJdB:CFSYgty1orJ8zNjEs7x+Em+M7dK
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $R0
- Size 362KB
- SHA256 1678d9d049a4a9a6f43183116e1c2e4099f4e018666d8423e1fbd2b1ca35e184
- MD5 d701d62c5f1b9e910811b6b61c40bd17
- SHA1 b9fc8726897f8ebc6ea7a98b2366c90003a13e11
- SHA512 1361e1be7bc6d631453f95d19082b69742109a10b90af49928fdc2caeac3deb6ec45cdc2f97a13476fe698c489a04b5e0cf9d6cc8d49f69308765fffc06a1112
- SSDEEP 6144:mwFl18ot7X/yIZ0xEVQGczEd01mKlHdhCZo6EErvRMK/y:rFn8o5Xa9xEOGezmQ9hCZoKrvRMK6
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

persistence
behavioral10 behavioral9
- Target
  2345DirectUI.dll
- Size 1.7MB
- SHA256 e8a0ec24c8cd45d8422c85f843b9d33a9140a1e1be4ed0e9901c3649106017bb
- MD5 b1f8b917d524f8530a153154ff626707
- SHA1 a571166e6b1fabf182c880c122ef31085dbb4aeb
- SHA512 5de6dad1d66e764a735815719f4bdf3136ee2961e83d7bd3bbfd041b007ff54abd3a97d00233664894d290ca6fcbdcc4fd1dee1e49087a363e71c7713c2b1554
- SSDEEP 24576:GfvQEoxYpov2cLaCK4cSdAF/N6x7R3pN6iAy+eywyQ3nlaFBC4IJAmMm40EIW7ys:YHoepov2cLaCZ1AyRR1CM+7jjwfsxl
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  HaoZip.chm
- Size 83KB
- SHA256 ae40d4c2f328ee91837cb0d737bd0d206b658ec02c46589da96491900a5997ea
- MD5 109e7dcf7132db62e400b9af9eeb64a8
- SHA1 e66658631df4c4f85714374868ef808704ba8760
- SHA512 97ea50b7ea10b6df230abad08c339720c64f54bf4a43908524b90ec8bcbf183e82f101dea4cad683f691bdf13b8207387448a6c7639b09a142c1d9bc0be6d53c
- SSDEEP 1536:7j0ykt9nuPXXUDLjVV2GKQn69LF+EBl2jgns2pw7iawJsysu3+Uoe1:XdktRCXXi2M6z/k0nUEJsysQ+He1
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  HaoZip.dll
- Size 6.2MB
- SHA256 5fc5c5bdf1d1cbe626fe3e4652846202a00fe2a79bd18d65d42babb219ad7476
- MD5 84ab1d9349144985f99e0723ab72bac5
- SHA1 c713d3b3d9232ac390e46f61d4230bd54a2adf91
- SHA512 e2631d30cd127e670f9a684e5dcbd6abf44205fa8a993025765808a6f30a93c8c1f2c276ae0799dc52083d2dc6b7bac4d6a208c268964f2e0813a0fb416ee0c2
- SSDEEP 49152:d4XV1L9CVrGDPIkKy1u2o2UWR2EFjT60nxertqLvkCpq/HjHfvHH2u5qNisfbRSj:3Vr5j2LUWR2EFD6kkHj//jqb5eFT80L
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  HaoZip.exe
- Size 1.0MB
- SHA256 3ff29a3a41b1a314c4a244ae5d6deb1373254632240a1a674be1e39097d3f29c
- MD5 a1152007a0ba63384cc9d39fdeb892f8
- SHA1 e7eab1a2763334e359f7d496a3e6bc1001daec9b
- SHA512 053c139d661bc3eae7dc8b6d476fea6c5cc5d7533d73a7dbc2b6091c177d51dea5735c9693ef749559d0db8fc96101c6b9471e383e7178cfe42afee2a6a28f31
- SSDEEP 12288:TtHgiN8ZVaModCtN95MArOsAgCRm1LNoeQ1kbWccMEzoi6bkE8a8SK:TVVNUVaMfJAgAeZYkbWNtkF8SK
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  HaoZipAce32Loader.exe
- Size 173KB
- SHA256 d281d88387df2da84ff17eb103c1cdc5cc76b2cd66a6a3e9c92e39abe1e3bec4
- MD5 cb31c74e3746ba817ff3a6366d592f76
- SHA1 f81a227afd8bfcc8ec22dfd8863955db886f418a
- SHA512 a985518e7b5a45b957f2e300b733c6cc2d3b9d78780413b8f5258c1297f13904e8d9fe4f54ccb77fc2d24c02e9cf74749a7ca1ba9f7edf7c4fc30ba1f21ebf1c
- SSDEEP 3072:zRZLGp9WV64M+omTO/efURgJ526+D7ubNAM5Sr37tlkz+z:7ip9C7TO/eMCJdT5FC7t5z
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  HaoZipC.exe
- Size 278KB
- SHA256 516c09e1b7d470fc864260894563b0cc90f9cafe868e2b4abd082d7e06e8605c
- MD5 caf3b13fce7d3089c93df2992af03608
- SHA1 7280d167561c4b836c64f73b72d1b72c68ed557b
- SHA512 df5d6b48af2e4f63741889a9d9a74679b4239d33a5abb317299c6ee2441abf269966156583eea22a999b764064ceec82b4ebe70bef2efc14590dfc499493be49
- SSDEEP 6144:0sy30JVAZNRjXy+ao8eIQxf7av23/kOxodA:0GJ+VG+Eef7X3CA
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  HaoZipCD.exe
- Size 1.2MB
- SHA256 29ad96aa2c808e02fd64d9332a6b306a72fcd7face9a99e2ec0497c4e48cccaf
- MD5 7979f91335092700e08638f6141298c3
- SHA1 cf03e248282be70899e9fd7c6dcb6e94b22cf2e7
- SHA512 9149973aa317b5b123dfa328feb3a84f3517fa731244f134611da408371e15b91b6b21ee4ff33affb5ec2df7e9457cf82c96267435ccff3218cfb313481f7682
- SSDEEP 24576:DF2S0uHejPTdyqi/ceyNKdmdvCwpfxWljp6kt:DF2S0uHejLvI8vCwpfx0
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral23 behavioral24
- Target
  HaoZipCom.dll
- Size 259KB
- SHA256 92fd47c9e3fd1edeba8d0770f755d0b0c0b7ad73caa5b422de2bb756c620280d
- MD5 2f877d4b9a548c776307f6097c47f59a
- SHA1 57ca0f41f8517ee72252c975453113fad77388bf
- SHA512 7c74128e8ef3c21682ff5e46a4f314b1e1c20dcd80db8c2fd8a8a930f9dc0509463b4508d89f9bd839ee6ffe36061abaa0567d29f0fbc90b893b34066a64d7c6
- SSDEEP 6144:TrebbwO6NwAn3XFNT2C5aKAKnTCR9rjDYFeoKUgwB1Wrw:/e76SAn3Ggay+rjDw3F
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  HaoZipCom32.dll
- Size 217KB
- SHA256 36f6200c90bd2c65da899b1db28b116815f9aa6d131e84ada6dc0b2192af4919
- MD5 81e73d4df3c502f36f06af09b4b261e4
- SHA1 9195c19e3a868ee99f68dc9a860eddb73786623d
- SHA512 adcd8e4c9a3933f0dae26c6081bae3aad229adca1a70dac608f61cc83014514273c77059978492447db54b4578e24ca18da64ad3744d15cd6d29ffa98e6affdf
- SSDEEP 3072:R9pi19OWVDnIsYoyzxxVPOq07Apnq3CSe9PexHp+v6dFwGllABCqsMJyVdt:Ri1gWJnIsfyzxxZsA2CDepGaHSBdYF
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral27 behavioral28
- Target
  HaoZipEditor.dll
- Size 248KB
- SHA256 aa21d46ec43211ef0fa8d319be4195bac23fe2952cd9b583bb8e730dfac41845
- MD5 857ae3236628970fb895aa782e14c09b
- SHA1 7fd241cd9c601dbbfabae689b977cdbfe8035b0b
- SHA512 67c9639189702d06bba7afdea81d61987db2effb34f41db55ec996c6c91d2abf7162db4c3c0a9835675b31d2864bc83edb998aaecb7eeb3b97cae34a2fa79c7c
- SSDEEP 6144:7D83apYb7qOLc3M0Q8opBRdpp2cc1OwuBg:/2ayb7qOLc3bI7pwmg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  HaoZipExt32.dll
- Size 362KB
- SHA256 1678d9d049a4a9a6f43183116e1c2e4099f4e018666d8423e1fbd2b1ca35e184
- MD5 d701d62c5f1b9e910811b6b61c40bd17
- SHA1 b9fc8726897f8ebc6ea7a98b2366c90003a13e11
- SHA512 1361e1be7bc6d631453f95d19082b69742109a10b90af49928fdc2caeac3deb6ec45cdc2f97a13476fe698c489a04b5e0cf9d6cc8d49f69308765fffc06a1112
- SSDEEP 6144:mwFl18ot7X/yIZ0xEVQGczEd01mKlHdhCZo6EErvRMK/y:rFn8o5Xa9xEOGezmQ9hCZoKrvRMK6
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

persistence
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Privilege Escalation

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32