9ea43ebf7f10277adddd1674a8539893fa21a501e4f2fb2a59ff5c541ec147e8 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
9ca5db44c334526081f92c28796fb098_JaffaCakes118
Size 4.4MB
Sample240611-ccmphazcrd
SHA256 9ea43ebf7f10277adddd1674a8539893fa21a501e4f2fb2a59ff5c541ec147e8
MD5 9ca5db44c334526081f92c28796fb098
SHA1 1a0aca9dcc2aeeb5db25432ccfcfdb0dfb877ebf
SHA512 1dfd9b03aeb4be0867dc75f37e734e4f171dbd5cd3552581a8477d2c8c0fd1762a2fcfd6dcf8dbe1ba4ebba1b81a9dd7e3228aa8c5d4c24f959fde588930a9a9
SSDEEP 98304:I6VoGqmUYGOdQOP//njcZJPcF3KLwp2xnSiQVHYKZFM4gYrvH38PJ4a:N1qkTnja23KJSnMHYbwV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Targets

- Target
  Panel/five/inc/class/misc.class.php
- Size 66KB
- SHA256 b7d5548cbe65f4a3533708ad64309a4466022a9ce592bcf4cb42bd7d6dfe4c8e
- MD5 619cd2ce2df8764750e66b4989c55ba8
- SHA1 26ebf1af647c6a28f70b73e0263fd10da861b6f2
- SHA512 2e323b7a930065da53e19eb32911533733a3085700f5c3ec47448abc6e53f19f988d258c5ed8cf70d71eb7d3f795ceb4e8629cd635a2a3e07a9abaf5f3b93aac
- SSDEEP 1536:Cwv+CpQQSfEv/CLCQecYeReGT6uNU51FXNtiLanesKY1K5Ue/iasa:CK+1T6qLcesKY1K5Psa
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral1 behavioral2
- Target
  Panel/five/inc/class/mysqli.class.php
- Size 76KB
- SHA256 5eb284f8432c5f442de9bdd5e41ed303aa53f47d5e0da5b8d67e957bbbcacac6
- MD5 ee9dbe92dd08c8f3a082ab46103ef4f8
- SHA1 cd9beb16a8ceb9403101d77c5c596c657074ff83
- SHA512 93e80b1da8b7f98a431c947bd435fc7f60b5e50a0af2ae9df1ecbd60f1d8ea0a709138cd40bca2ed6157f3a5d6e0ac3a29e358051ba37373315aa6ffc3e52638
- SSDEEP 1536:kHgMcfeNcsDDkdnn5ssfTSxs51LsDZVrWD:pfeNct
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral3 behavioral4
- Target
  Panel/five/inc/class/pCharts/class/pBarcode128.class.php
- Size 6KB
- SHA256 070c18ed48a10fa0a26482426ccc20f494dbbb79b0ca6d8b70ffb2685947ba8f
- MD5 a9fc8013bd8f51789fb657199b502637
- SHA1 7e862deba68e60a997f42e2e1c757ba2e90d1b9b
- SHA512 078652a07045e226541e411ce67a478f570f29b4a9fc3b234f58c16cf29e31c35ac9b12c9859530c4fab89aa8a9fe1d36cb4c7b48a55cbb79b92718903c27a61
- SSDEEP 96:MoB3gDYR4btt/uGPyDWIesaS7f3HddPsoEXAkM:MoB3eYRyEGPyDWHsaS7tOoEXAkM
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Panel/five/inc/class/pCharts/class/pBarcode39.class.php
- Size 7KB
- SHA256 7d82743e15cf0d6de4412fc116c4fe1ce932c0116ca2a10f46962b1ed33735a2
- MD5 ff78588d44eece5ad0436581257b9e9f
- SHA1 810e27278870cb260bef6d9b7794f56cbfde54b3
- SHA512 f7f0cf43116cc7f28159f2c8315967dcf003f9fa5f88a01b4d44c080ccdd77336c9f5bb7d4e54333abe9e981000e5655b9eed4d6588415db1c2caef75505740c
- SSDEEP 96:eoB3gDYaWiATbK1/7IQri2vZO9zwfcS7+HddPsoEzzXAkM:eoB3eYZiACtI+i2RO9zWcSIOoEHXAkM
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Panel/five/inc/class/pCharts/class/pBubble.class.php
- Size 14KB
- SHA256 bde928ec2a3d04012a2a5aa652b9f9b0f9dc70c8d0789f70fca2917f519b88f4
- MD5 e297812e01d2338df95c40a74bf3699e
- SHA1 09c88abe3d5b789d7668b3dd05d62b701273a9d6
- SHA512 3d8acc03675f933f068b6554a87d56c326f6bd1b60a9167e38ad424982b7d971b8bb639d71a0da5f405002844582b04196d0fe370b7a17be46c7f7a5465a7f60
- SSDEEP 96:toB3gDTXYQO49Wy65dra3Xte7WxvjauVZsmfes0IUWlnb5y8bkzxy8br8p77pvK0:toB3eTXYQO49Wx5dW3XiWJsS08pyhE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral10 behavioral9
- Target
  Panel/five/inc/class/pCharts/class/pCache.class.php
- Size 8KB
- SHA256 d7d4f3dbaf3a39ee73056cd1c9690ebeb3370528f720e0de145db78c211856ec
- MD5 718b4ca4d55c403332a3477a10161789
- SHA1 97d6cef62fe9e14f9a871648953ee2bc2538e45c
- SHA512 fb0aee797f7c1b6b02390a35ea673abd0406bed44454e4ab8bd38dc7ad176db5155cdb2b058df3894edc7468f5dfb93494e042546e236fa06a2ce7ab52052f5c
- SSDEEP 192:VoB3eY60PKKfm2q5HNZVo/vQG0lJeMjDK5Fvjy7:6O8CFTiEGjy7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral11 behavioral12
- Target
  Panel/five/inc/class/pCharts/class/pData.class.php
- Size 30KB
- SHA256 f705add7a7e20a5603b432d97a80170a9d31dc4de449a6a0ce014b4169582b1b
- MD5 5f125e49f5fb06094f12aa27dbfa31ed
- SHA1 aff84d0e69f85c91705208029bf88dd8b4d5cacd
- SHA512 0b4c073ffbcf8e4c7932c121bde44698656b0ab19dac98692f2e83470510a1829d09eee6418e47237cac115bed25f8d319525f13ad7a2e4fc7876016a3d3c6b8
- SSDEEP 384:PO7Ex4JPAMRdTXm9KbSX5hyxUgMsS6sz8n8pwvQJxISbcV5s3NA:SExmnzm9KbK58Ojsoz8n8psIISbh2
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral13 behavioral14
- Target
  Panel/five/inc/class/pCharts/class/pDraw.class.php
- Size 319KB
- SHA256 97201d530c4745751246ed4639cf24e3342ce0a4a3de885b2e969e1cdc1bf3db
- MD5 0b9bbffe4c457652343862347e1357ef
- SHA1 23d4591b018f5d133ecdff92e387877b0845b432
- SHA512 20cd48f0119681a925950eb5771cb884eb5a8e980d8e931df130320febd99724cb66e0c4f5cbd6a2f7e1ee190a7f505a5a5426e0831daae6d817b1bbdfa9a149
- SSDEEP 1536:PkqjoqKdH5Isz01Dx0MBDK5BgJctv5VqFhuQAqoXkbETmuDodIE0XX3nz:EmF4QAqhbETmuDoOE0XX3nz
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Panel/five/inc/class/pCharts/class/pImage.class.php
- Size 19KB
- SHA256 40a1105c0b71544cc8352fefacf982252d0cbf68c7b2ce57ac010cf152537028
- MD5 de8a9c64df37a59ca0d4932414c817de
- SHA1 429b0b9dcc9e3843976dcb14c16e45a874208309
- SHA512 952dd9538fdbf743a726b57772bc64c51c5ef158328f2f638d12fc6a79cd87c748f858637c7950618437aabc3164e535bf32b5604fcd1e0f225b19c84754f1c1
- SSDEEP 192:goB3enohsCfN2o7auOmPhTRzTePSmjfqmfLCEm1ty297z2yr36zhaa4aY665ppLP:lOoFAmPhTRzZmTCFZJfFAu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral17 behavioral18
- Target
  Panel/five/inc/class/pCharts/class/pIndicator.class.php
- Size 11KB
- SHA256 03db301cb33d99a591f32ac3050b24b360434759c4cf6ea835612e4516bef920
- MD5 4ac9195a473ab04729bb513852bc1bc7
- SHA1 af605e8882ce5ec6b41b3902b75414fdf4e54257
- SHA512 d7c3e887f0e467fe72c155be1dab637fb9d368ef08cd6d36857bb0185a1f1d2792643df791b8209b2325d8c27dd6e1a78ed8531f3a6e0996156b95101747832e
- SSDEEP 192:tjoB3eGZNS+1uFIgn1QKAlOpFCpK7TWOe:6OQ4ntpopBj
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral19 behavioral20
- Target
  Panel/five/inc/class/pCharts/class/pPie.class.php
- Size 65KB
- SHA256 a84369ce6edeaef275e6973227e6212df23234e9c4649e73354b9b247559a13d
- MD5 4a8df9c68451a7846fbbfb5213c450d8
- SHA1 768de54634a27f2899887630427aea84bdd87bfc
- SHA512 ecf9a4d38dd3c18db9b48e872a5289fea5d648bd53a335322cac2015a57083d3e2fdd4213c197904cbf0af61a160a58d0317c7f72a03e93dc7d5257870fab9b3
- SSDEEP 1536:QQaY0UNjLGv8S6STShvmv1jSXSNBOBVSTSBvmvGO+vUSsk6V:owO7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Panel/five/inc/class/pCharts/class/pRadar.class.php
- Size 33KB
- SHA256 05b4befdb507843d814dd4d9d84747f2ae2a669432ecf07b7cfec71f23ea4bb5
- MD5 164be607d90ef2cd65685a9a56162631
- SHA1 da52bc88e278f1b9e0f2f7584e1b76bc24875e5d
- SHA512 9b8d20509309b8dd865abfb47528c2bbbbc6e22ff7d31db24c3f4a4243ccafcf418d915c4cb1d8a9241142d4fbdf9da03683c24de9daad0c42f4b8bc2c94c075
- SSDEEP 768:XT48Y447QxnJfsiqCxsbS8Aogpvx3MSq5xgi:XkJ5
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Panel/five/inc/class/pCharts/class/pScatter.class.php
- Size 65KB
- SHA256 168c21cd280b83edf4fcf965276143f311d89aac0d7cc3fc6b5af9274733645a
- MD5 d22b6f3971501ade5c1bddb043ea18fe
- SHA1 597ff7373a40a57c432514e3c903dbffa6682bff
- SHA512 7fa258954f1e21b6f6dc9ecf5023f8e084e8212ce94dfeaec0fcceb30fcdad63e45398703d7cd67d995c0fe1bfff17be7974743611833a0a8a554e3b51c58e23
- SSDEEP 384:WObg3izD+lQ740MMDq+gr/wPpYsZZOm+V4IU9NZOLAO9OeZ8Ozq1uKhi71Yl0/vV:ys+GYAYmgfU9NChzq1rha1Yg1UZI
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Panel/five/inc/class/pCharts/class/pSplit.class.php
- Size 4KB
- SHA256 e46e2291ca5589a78fdf993c1ca5ec2302fae960013fdc69be2b497d6c5e29be
- MD5 17d8cac52d3bed00f906dc8877d01b66
- SHA1 1a0eefec06e8f1d0e49473b373569ea5c5c0669b
- SHA512 30e4d01721e9923a6f3e2a8dfe751e4b91dcd2dfedaacbd8e4a9460df0df5ce289c31aa2fdaa014c7f08f9935e0ca1fa59df005d1b4ffcb5798286617bc692fa
- SSDEEP 96:DoB3gDjkQjFN/vvfUuaT/6+3XF087ZOWxrZFv6dZ:DoB3egQjbQrZ1x7ZOWxrZFv8Z
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Panel/five/inc/class/pCharts/class/pSpring.class.php
- Size 34KB
- SHA256 a34faa37dc7a4b0544ba17d0570151f0453019cd05698d11d418b2da80d6858c
- MD5 e26e331a0cd5b7f9149379668ebc1322
- SHA1 6bec353926b5d9ac7aec968d49608b750bb7726f
- SHA512 8c32d973e04b8d9ceb285d2a9198c17055b6b3f6a81244463a5db1a3fb072d190092da3c16dceeb2f51d3283046223b1f74cc09c38b6423aaad71a01c5e8d183
- SSDEEP 384:EOG4tIOaSv8Pbm/MlFw6m/dIxy8Tdld3ICQ4A:s4t0Sv8Tm/MfwLlIxy8T7VICzA
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Panel/five/inc/class/pCharts/class/pStock.class.php
- Size 12KB
- SHA256 227da3a784d1f55e0f977053902dbcfdc4f637a7139c0c302b3d1a04cee99db5
- MD5 cedc3d806da204a244eed2917f950f8a
- SHA1 b2bbc162ff85004a70e3d57261d048ba2d141009
- SHA512 9936660075e8df62235357c69ef5fd70599f42b57ac169e0fa316dd8e465dc6d3f1c1d9937c9c15d2d2fa96c3793aff35d8f43adf2697b6a1e59a853874fbb92
- SSDEEP 192:xoB3eYYgSAsOdqmNhZXqdSkY3eXbs1B4A:WO+dq0ZWlY3eXI1Bd
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32