Overview

overview

3

Static

static

1

autodomain...min.js

windows7-x64

3

autodomain...min.js

windows10-2004-x64

3

autodomain...min.js

windows7-x64

3

autodomain...min.js

windows10-2004-x64

3

autodomain...min.js

windows7-x64

3

autodomain...min.js

windows10-2004-x64

3

autodomain...min.js

windows7-x64

3

autodomain...min.js

windows10-2004-x64

3

autodomain...min.js

windows7-x64

3

autodomain...min.js

windows10-2004-x64

3

autodomain.../ui.js

windows7-x64

3

autodomain.../ui.js

windows10-2004-x64

3

autodomain...gin.js

windows7-x64

3

autodomain...gin.js

windows10-2004-x64

3

autodomain...ess.js

windows7-x64

3

autodomain...ess.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95f988abe8138c422037a723b149b4b2_JaffaCakes118

  • Size

    205KB

  • Sample

    240604-x1kj9shd73

  • MD5

    95f988abe8138c422037a723b149b4b2

  • SHA1

    be276fa0f5e7ced2a88faf0d1e9fcb508e6559ba

  • SHA256

    75b0535e4864c01b83d92ce8e41c8d010cae1640481b3cb5755a40bcb6132361

  • SHA512

    5fad298f8a04338344c31655bf4e521c188d74622d915ea618f203ab1e532dc04bd604fdb3270699def1a22778af77f2db15ebea5756ea038087e80589deec9e

  • SSDEEP

    6144:ytuPneHdamY+J/llhZupNNWulxN8joe13pqFJW7:yYe9PZru9WQ+jJpq2

Score
3/10
execution

Malware Config

Targets

    • Target

      autodomain/autodomain/autofil/FILES/app.min.js

    • Size

      128KB

    • MD5

      e82645b490bd662e364e6178bb5af9bf

    • SHA1

      e234673d8b11e9c9ecc5a3353cd3bb76fbad219b

    • SHA256

      f3ffb0e895c8503c8ae77b9ab28700f88c7fc5d966882634c059042f94dc3f85

    • SHA512

      c82dca272af518634ff2bce9af7e8e4fbbfcf36039624935b7a0d1923c78ddeb2becb953e5b73bb915a5b3f7f1ed99f84153aa6dab5f758c6dfd222404b8fef5

    • SSDEEP

      1536:GnVvudFjKFlD8buoXzr+K67hQRjacPDtYE9hI3cEoyTJrCqsw+NVJnoxvQaR6vNZ:GVvuqTtGrJ6cSEI7KPaw9IqJMrA

    Score
    3/10
    execution
    behavioral1behavioral2

    • Target

      autodomain/autodomain/autofil/FILES/common.min.js

    • Size

      12KB

    • MD5

      febc6dbd0cc54af89f6af27c320a42e6

    • SHA1

      196816e183554e2e838bf6d51dd835803f046a8b

    • SHA256

      32f59f8128d42dda46d1e3234d326574d25659bda0cd5762021e619c1a738ea6

    • SHA512

      5fe325dfcaba6ebd56c3b435df25f67f8d3ae8fb6074f6e7d9a3ed8333ee99df89a09571a94bed5f9714bd7187c60b78ce908733de87190d368ffef894e8d380

    • SSDEEP

      192:kbcF4Xt2LAelJ/h1FF0+Ley3NsiM4WERmsjL1qreA/GOtiIvm:49XtAAohFF0Ge0WQmjrz5vm

    Score
    3/10
    execution
    behavioral3behavioral4

    • Target

      autodomain/autodomain/autofil/FILES/jquery-ui-1.9.2.custom.min.js

    • Size

      231KB

    • MD5

      2e71daa2a4a9d78e76d0aafbc1ca4ccf

    • SHA1

      4726c1eaef1ef945ff53d25685f418be7638808d

    • SHA256

      f63ffa752044f857838b22cab1b1098dfab0701184ab6fcbf447c63e829660f5

    • SHA512

      610f1db27fb79a0024d70ba9afbb511f9ea9201a6590687b9f079ab4886b906ecde3f400c49f66baa3c650cfeffbc8d01ffb14fc6d8ae9d6ca3bf0a7f76198c1

    • SSDEEP

      3072:foCqEpQ52EiXO3/g3m/nY56QA+W+TpycF2MBDQM5q65gyE8BK:fQL2de7/n5+fTptFNDjE

    Score
    3/10
    execution
    behavioral5behavioral6

    • Target

      autodomain/autodomain/autofil/FILES/jquery.min.js

    • Size

      94KB

    • MD5

      8fc25e27d42774aeae6edbc0a18b72aa

    • SHA1

      b66ed708717bf0b4a005a4d0113af8843ef3b8ff

    • SHA256

      b294e973896f8f874e90a8eb1a8908ac790980d034c4c4bdf0fc3d37b8abf682

    • SHA512

      87d90a665c15d71ac872bd8bc003d9863964c7ec7ada6370b902b93c0bbd7770fe25730d946c7c6a465baa95efa74bc0e78af3f83aea615af35060cc8702a6c1

    • SSDEEP

      1536:EPpEy5BMibZGOj/bEe8v+/UWf4IhvAuCh/jqkODZ2D5N9Rag0MOIdSZAgtgoX5Yn:bIO/e2D5c4LgtImLja98HrK

    Score
    3/10
    execution
    behavioral7behavioral8

    • Target

      autodomain/autodomain/autofil/FILES/jstz.min.js

    • Size

      5KB

    • MD5

      c7f98590427e8461e59e7e612eb111f2

    • SHA1

      c031636ea0b551aea8f6e3f1e160fa672f1c8891

    • SHA256

      2d7f43c7ddda4bc107c80e268023650196b790f2b9ebc4b73e8908af1787d4f5

    • SHA512

      a6ac90b405ab4812187650c95f3777ee2bce12b664883c132f6e56dbea255b4be97cc7966abc645cfb478ac86ac67ddc8363600c252c8c8a2944c1a738a01f6f

    • SSDEEP

      96:csLDbYBvd0TDZAEc8ox/ZcxjeWxn/oqDiuBfJqbohWA4tjRSVJm/IK8249rz1O:cWPYQDho5e5DXBfQbsWA4tlSVJm/3UDO

    Score
    3/10
    execution
    behavioral10behavioral9

    • Target

      autodomain/autodomain/autofil/FILES/ui.js

    • Size

      33KB

    • MD5

      ee701c564d3e5852e8fa0b426b6f0671

    • SHA1

      89c19a43d4c1d88dc7daeb1f53a21a9e890c4ae1

    • SHA256

      e4048613475c00b1a77c90d3f7a8f9c0986cc710eff9ad990db9701d2e9995c4

    • SHA512

      7c861aa5e830c3b5e67668524b55487660d8bab27d09751a661e309f2324ca819aeb56786e3b27ff78d74232d1645dbd6d9799cae7b9888ab46455472c5741b0

    • SSDEEP

      384:IxBgXUweyBaiF9dD9piACqfi/7gp8jcNaZcc1Dc/nSZ0iGR6KiglTWadMtWiAUx/:IzsUDy4M9dD3u7gkOaZcu5UUaV0Z

    Score
    3/10
    execution
    behavioral11behavioral12

    • Target

      autodomain/autodomain/autofil/login.php

    • Size

      8KB

    • MD5

      7a8765ac2b62315ba6cb29a6c97f50eb

    • SHA1

      a9787d4b23bbf9f28a04ce62ccb7fcab05b62349

    • SHA256

      9d873cab55b14ff73d78c878eb2fbc4bb37d09cc39a63dd8c6c071645afbe86a

    • SHA512

      6ad3a8d0d1de4a2cf7ad1158256c45f4133ae642f6ce76ce1606e656d618d60c6f1c129a2abec894c4c1848ee9467bf8523edfd5d0e6ba612a4231878416945d

    • SSDEEP

      192:X80FHga5YzA2ATKvhEG0J5SF2JKlgZCeELx1uGHQ:X80FHgsYzA2PKFJKlk

    Score
    3/10
    execution
    behavioral13behavioral14

    • Target

      autodomain/autodomain/autofil/success.php

    • Size

      5KB

    • MD5

      9d08cda7bfc27392fff7eaf62c7148dd

    • SHA1

      fbde801d183ef2c24f75501e4afbb32e5fb8dacd

    • SHA256

      8ae0aee410e7009440af8b9ec75d82817bf72781c21772de36eb98e20f747c58

    • SHA512

      e6beab165e5482447ffc207261891ec896000dbffc9a4caef592124830fac4d1f1e286ca1f07ac9b340d91355cea48fda9705d7e51796a6711c7d2a83b87792a

    • SSDEEP

      96:b80Fv9EwjnVM2Zrq51eglDGIJmr2bNVOSzSlsLZCeELx1uGHDE:b80FCwBa5tFG0pNkcZCeELx1uGHQ

    Score
    3/10
    execution
    behavioral15behavioral16

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

8
T1059

JavaScript

8
T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks