0c860b7f821fc9d1ac0d91410201743febcf459b95c848529a8f816a9309a240

Sharing

Copy URL Twitter E-mail

General

Target
a2cccb3b153e379be1097784004c5d6f_JaffaCakes118
Size 5.1MB
Sample240612-2t4f1stfmg
SHA256 0c860b7f821fc9d1ac0d91410201743febcf459b95c848529a8f816a9309a240
MD5 a2cccb3b153e379be1097784004c5d6f
SHA1 fcbba87da7b228135b1a3a9e184000978011936a
SHA512 0c2da50ea3cea93d17534d8dd98ae5b876bdc3df2d0fe2640a1ef2b4c610a654677cf0a62882d29e3b2c81054e4f198d02ec5cc7384ee896783c6b961da1b7f3
SSDEEP 98304:xu0kEKAi/8Zb9xrNCclVIx83sLzaKVRVdlgDMxZYL7fT1GbDSf/i:c0DZRZb3IE8LeKV3dltqfbGgq
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  a2cccb3b153e379be1097784004c5d6f_JaffaCakes118
- Size 5.1MB
- SHA256 0c860b7f821fc9d1ac0d91410201743febcf459b95c848529a8f816a9309a240
- MD5 a2cccb3b153e379be1097784004c5d6f
- SHA1 fcbba87da7b228135b1a3a9e184000978011936a
- SHA512 0c2da50ea3cea93d17534d8dd98ae5b876bdc3df2d0fe2640a1ef2b4c610a654677cf0a62882d29e3b2c81054e4f198d02ec5cc7384ee896783c6b961da1b7f3
- SSDEEP 98304:xu0kEKAi/8Zb9xrNCclVIx83sLzaKVRVdlgDMxZYL7fT1GbDSf/i:c0DZRZb3IE8LeKV3dltqfbGgq
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/GetVersion.dll
- Size 5KB
- SHA256 db09adb6e17b6a0b31823802431ff5209018ee8c77a193ac8077e42e5f15fb00
- MD5 2e2412281a205ed8d53aafb3ef770a2d
- SHA1 3cae4138e8226866236cf34f8fb00dafb0954d97
- SHA512 6d57249b7e02e1dfed2e297ec35fb375ecf3abc893d68694f4fa5f2e82ec68c129af9cc5ce3dd4025147309c0832a2847b69334138f3d29c5572ff4e1b16f219
- SSDEEP 96:E12kx1WhoMHF7ZmIpNkTif0geoBLERrqm1BdROBh6Hx2WsTDBi46AQuP:Xll7A6NkOMiBEReEBdRwiMTDBi46AQu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 14KB
- SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
- MD5 a5f8399a743ab7f9c88c645c35b1ebb5
- SHA1 168f3c158913b0367bf79fa413357fbe97018191
- SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
- SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/Rfshdktp.dll
- Size 2KB
- SHA256 acc76e81f71e7f2ba58c36d678bc9ae4705e0187a3cdfa6d0025190467d9c0c7
- MD5 9410591a148871a6d0629cf25b94526f
- SHA1 be1e8b0fe8327f185136a0d2460a68f720484535
- SHA512 465d3e418e769b907262e07cbca3d2c5132bf328431d456be09c059821be20a6d30106562d7ef0bfa93ca219b2abe57ee891d937419fc4b8840987b184b45df0
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/UAC.dll
- Size 13KB
- SHA256 a6d956f28c32e8aa2ab2df13ef52637e23113fab41225031e7a3d47390a6cf13
- MD5 431e5b960aa15af5d153bae6ba6b7e87
- SHA1 e090c90be02e0bafe5f3d884c0525d8f87b3db40
- SHA512 f1526c7e4d0fce8ab378e43e89aafb1d7e9d57ef5324501e804091e99331dd2544912181d6d4a07d30416fe17c892867c593aee623834935e11c7bb385c6a0a8
- SSDEEP 192:vIARvmFvcukSWn8EAKVZ8148Dj33RZgqWVWYuOUEjRuFzEun0J:v2mukSe8EA88pRZAVWYuO3cFznny
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 f51fcc30e929a64756e04b514e103aa54c135c47d62511efee279f168f63b3c3
- MD5 b720695fab871bacd48c54aea304c310
- SHA1 e2250a8d65594d802cd95e8dde79f813ff9773c7
- SHA512 c277bf5de16aa7f6aa39eda9afb010f8fa407bf4fef54b2a5947fd6c698204052b3f97e587ca59c5faf256c29a03e9de6c37033c5ede5666e3743b86f2ed411b
- SSDEEP 384:jwB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5fQ6mT+m//a:jfUFeJ5S6PHLNa9c8am/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsProcess.dll
- Size 4KB
- SHA256 95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
- MD5 05450face243b3a7472407b999b03a72
- SHA1 ffd88af2e338ae606c444390f7eaaf5f4aef2cd9
- SHA512 f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b
- MD5 SHA1 SHA512
Score

3^/10
behavioral17 behavioral18
- Target
  CheckTudouVa.dll
- Size 254KB
- SHA256 a78e96a9645e1f04070795b45aae20582331f2de325b39a844a5b02e62c46984
- MD5 f11a3eb69c056057b6c65eb24ca79b14
- SHA1 2fd09f10f58dac2f411abf537e80f37288578235
- SHA512 c59343785b97fcc0584cecfbe80ecd8d340abfc847cbb8b252678c4127cf666acf5b61831a65222c2d2707799a7e5dd98805cac261f05f4c7f48a2d778c29671
- SSDEEP 3072:ycWpVI2KJm7/UE8t0BMWs1rX+n+wP6ceCD2/vPrq5oUJQPvWUyN27QeCR:5WNKULBJs1z++wMb0oUmmOU
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  TDVaCom.dll
- Size 242KB
- SHA256 b7429661268bb07d7662c492957f82ecbf60e62290235b1f491ea999a8a25983
- MD5 2da6a76c8cdb10662b0d7baf5e1c09e5
- SHA1 68d128ce33bea58fef560a6247a5f83dc7aac2b2
- SHA512 1c79f7d67c7aaa286694d9406f849db2781e0bfcbb973502ac3bdc19d7ea8751bfc2ad9abe254323b2ac4056df0eb0eb71a002522d6b23e68d15f42f76503278
- SSDEEP 3072:NrMSnRxQD+vYGrMDqB5BfG8KMm15OTDSqUCXdLCcan1p07+rq+ghQxgDXTmt7SS:NQSIDoMmB5Be8KLHOfSiXcc3UtVgDQ
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  TudouVa.exe
- Size 3.1MB
- SHA256 df21244436967f84445da37d6d4dd61d71f22a4f95eb6041c29a0dc1d1740963
- MD5 999ed5ad5696f72ac4963eedf7d9e1ee
- SHA1 b48ad246b2ca8364559d1f7dd3667ea13e8a4ab8
- SHA512 31b229a2c92791c028f5b0dab670ba74dd9b9e7ad75a3444f53e107a1bef94f054198bd9b86f9e818f31995944c8fa3ac6a4c2d7fd1b4c14451dd1f7e7ef893e
- SSDEEP 49152:BuL/dL1HG1pcavCLYx9gwhPtUZ2SmTTayjHuaWajZPUcYcFp/0TJXB+660Iq0I4:BuDdLdG1pfvoYYEpay7udajZd1q4
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery spyware stealer
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral23 behavioral24
- Target
  dbghelp.dll
- Size 1014KB
- SHA256 72877fb0af03745e2a78414ddaa05f1871703ad4c0d16d43d4ae62971ff52f0b
- MD5 148423fdbc7f0b07d8d166414c95b8ab
- SHA1 aec78b99dbfff5071f9dba74117ba6e5228f89f6
- SHA512 82f0ce44858bdc4ff3522d8c7853c073d33dacdec53d9b9b31c32be3f4ded2ed102a55dae316611b9359eedb24b3aa698474c39b989c15231b3cb8fa79f1cc59
- SSDEEP 24576:3qRTia2lxLx/LBFGfuRShWsSn4HFDndyx:aR+a2lxLx/FF7sa4I
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral25 behavioral26
- Target
  ikuacc.dll
- Size 4.5MB
- SHA256 e3d82685c523f6a192faac7a6fe2c8609c0ca121d2fefc0025d7eb589a2336f7
- MD5 7968e0046a0d36d52569e49ba7e51624
- SHA1 79d1c37876df0c087235e8bae60ff6e9998abcec
- SHA512 8c515f108b0f28b25984a53970e9c2bfb12b125890757796ac16014a24eb45cd45b2717cc5cf787932f33d6e1602e9fa3ec84f2c0c43b0856dadd3f7f87a30c0
- SSDEEP 98304:K+zCsld0tODoAguXYWkf87iAwnVcTI+Jzv:KWCsd+OnguXYWfs+t
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  ikutm.dll
- Size 189KB
- SHA256 e8e6486debc9bf8f494b3a5ea0bb8f21e0680c4dc5c705d44020d4725e8b2c59
- MD5 39126808cbff045f09b2e19d8a9d6ded
- SHA1 c4c4c2cd97c82115500eead933984f486001bebf
- SHA512 45f9d2647aa3ed5ee766bc09d17baf97e593ddf1849a554c1b7bf5da3fe56161c0837c9206e6e191f10148c7ed2d0f1281633ea3d0980c60b2cee7d229bc0700
- SSDEEP 3072:DFvZ09pDgyfjpmxEcQirVtcvfU1yYwOJaED8IQnZHFK:r0HUyfQrcnZks1L6
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30
- Target
  ikutmco.dll
- Size 205KB
- SHA256 bfb6787c2c30e17d22d252f674470f5146fc631d192024464b61157914115066
- MD5 26034082bf720e4f732db63ef9b9ba8f
- SHA1 2e370817a138989026e85b1e62f147505d1ae63d
- SHA512 1ebd785ead8e911dfa573c4f03ee4e13fd9841d29219749e369d2223ff646eaf19b607bb0bb6a7d10c5e5b8ad586b8ef9e5506b1af4b6d167f0803493900d4fb
- SSDEEP 3072:seHVsgHL6FQVtAJAPuKh2r80Se83QIOUbaS:vrmWn2QrQ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Drops startup file

Reads user/profile data of web browsers

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32