8419f35549c2749834a3ac4926b9f488c60785631cf3ee3eecf3a035d6225515

Sharing

Copy URL Twitter E-mail

General

Target
a1133e841b26a9a8c539a5835f520c97_JaffaCakes118
Size 22.0MB
Sample240612-sdp41stalq
SHA256 8419f35549c2749834a3ac4926b9f488c60785631cf3ee3eecf3a035d6225515
MD5 a1133e841b26a9a8c539a5835f520c97
SHA1 995779f322f2edd0e126313ca6da0c72abe83700
SHA512 fd1021dbdfee5c90e970b61d0102f03c2411ab39fc56ef5951b2caa7c6d828c7656a7a08383097f7828fcd81fc119278081b2653ceb7457d96558ed57175ff56
SSDEEP 393216:Em9Wv0OCkuRy9JyXud/fD7BuzjXkieGHySb2gmcX8d3pPjWxqY1s3ZENelZLCGno:EuWskuRyaXYxuzbkjDgDI3Ovy3Z5CGo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

execution

Malware Config

Targets

- Target
  caddll/Demos/DLLCommon/sgConsts.pas
- Size 206KB
- SHA256 be0e6ded880fcc6080c3233fd584ed80b3409c4c819223d56cd3dd52fbfe1514
- MD5 3e827fae4d69f43bcf8a971ccc650941
- SHA1 adf7ec89c750f693f8a52077a46a73164e2d712b
- SHA512 a17ea6a9fe8f1844488cc023ff061ab708dfb4dc59fa969cf20628f6a8391ea85fd7ca69855dbfe031c2b48a15aa7952db1c263f69f158310ca49e0470807d14
- SSDEEP 3072:XuFmQmQFrQgADVNidVFVLbY565ff8XU6i5kJTZd3w:XuFmQmQ1QgAbiTLbYI8S5kpTg
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral1 behavioral2
- Target
  caddll/Demos/DLLCommon/sgFunction.pas
- Size 481KB
- SHA256 bac89c35ca75bf08386fbce7714c4d9b6894cdd530afdcddbc32fb0af353b3ad
- MD5 a8fa1e2e61abdb0a9fe75d5f7606b89b
- SHA1 0b8857c26e56b4af15cc7fdde312dd2eea86891a
- SHA512 667d32b2e7a3f79fe2a1368b59edf9ed4930a47a8bd66eab6c9eef8483ac0d921477942cf6f9b32e9f313b41b74f4f4d673bcd8f0366b7914ae606d784fd4f11
- SSDEEP 12288:y7zUOWu6CPnGGEcYG5XZKqzHTKZ5Eh1DeurH:y7zUOFPKqzH4Q
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral3 behavioral4
- Target
  caddll/Demos/DLLCommon/sgInitSHX.pas
- Size 506B
- SHA256 7c294180111adeb6b65fca3fa79d227af5846c4666d237ecba1cdd383d018b60
- MD5 cd30e41b7b362ed2b19ca5c353266b8e
- SHA1 e8223d20721ade70339a73385409ee48fd0b7064
- SHA512 aed150bf7367b92cc93315b55a7490fe38a98cae0fa430af410fd0d42d10503dd28657c295f2ad01b680ab719e8d48365868eb9b93c30eead6338f602acfd0a6
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral5 behavioral6
- Target
  caddll/Demos/DLLCommon/sgLines.pas
- Size 30KB
- SHA256 564474c8b5f99cf489a3c68a1eecdb68bd7667d29531d7d4233631adbd459d38
- MD5 b5795ec2bab5027eac83bf9c255a6a7d
- SHA1 92af2cb242a3e9707a5f096a476d1092743e19c8
- SHA512 d4fbf3303db7be7140918fb8f8583672e356f63eaa01fef81038a2bfc9292c4b0662af2c99d5d351b7326b06cb7f60bc49937dd4584013f965cc0acd1e02b53c
- SSDEEP 768:XoEcyF10lrahzjFbJ1Eg+LTyFQKeS2qkBXFXZ3YUC5LmSWYZZNIBzLlLaBckkesy:XoEcyF10lrUjJnEg+LTyFQKeS1kBXFXy
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral7 behavioral8
- Target
  caddll/Demos/Exe/Win32/ExportDemoCBuilder.exe
- Size 2.4MB
- SHA256 97d89649571e3c264e06534a9d46f1566c2ae3a2b0c21443b7b1be702557e405
- MD5 b986c553dc92918b3c61fee7bae05afa
- SHA1 2a863544e153654d67292e7254515ca013eeb90b
- SHA512 6d8f36c9f4f2a2d187c8af9790080146468604cfc2db152e5e625933ffda9f91e81d7f231cac455ded1d7ffb0280a041cde83bfdf6de16c64f56fe553503e8de
- SSDEEP 49152:Fp1TokFu7eSiOCVmB2ec0UooMddrn7wXAi0WMtAVEj8wEgKeyiuLYXz1BNVelsTH:fZokFGCSc0UooMddrn7wXAi0WMtAVEj7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  caddll/Demos/Exe/Win32/ExportDemoDelphi.exe
- Size 1.3MB
- SHA256 0b4609b787c066a993a4e6cf08e3d5159bf44fe66f2b923cc22309bc463d6d04
- MD5 6e90ecd6f2c4f676644b106de2a2e7b6
- SHA1 3ed71a8a26a1f2e062eac098178334acb0315345
- SHA512 9dc6b034840c193029d10fc1a8579d62fb12fd8e75b83c215beef66fe251a181c512dadb3005b74c0f15d922fb79ebb89cb52b7e191fee1b190497478dc60d4e
- SSDEEP 24576:/Sco5z40CS3gJ1cm94+4miTa6fwiLbtBgSzcuUNc0bTsU3:/xIEA8V6btiSz0bt3
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  caddll/Demos/Exe/Win32/ExportDemoVB6.exe
- Size 28KB
- SHA256 fef234923a0eebf44e4cedebf51e2a0bc0e8f45628ef6ea6cb8855bda271e607
- MD5 fd28a04c9cfbfc764d823c28481a2dd9
- SHA1 2ed5aa596f5402b7dd0b5d0e760908b0c0fd9674
- SHA512 3b6b63f756be0b299b0ba39f5bc89592621b21da62aa63561348986a4a77d2c96d0487fff86e19b0cb19b950632fbd735b3686aaea5686f456ce0774c073577b
- SSDEEP 384:ubAcWnLT9Snv58ASdxJLcGmKrBwQ30DlQuIywIMcG2mLcs:2nWnLTgnvudHLcxKrBqlKc
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  caddll/Demos/Exe/Win32/ExportDemoVC.exe
- Size 19KB
- SHA256 ddb80a17a15986c1b48f166e7c8d65523d94064b1a7aff36e8ad03a443195be1
- MD5 b3887f5a1a430de5a944da647837dd57
- SHA1 2dbff76425396d98e33f0f7752aad9c2e391d2cf
- SHA512 4234da5e59c212206d0c8a6749377708ccff2ba83c3c84f51a715f4cd4c9ff1dfbfda12eb71c3cdd8cc01c9976fdf933ca764a0203ce6a0c61e6e662e58ecdb5
- SSDEEP 384:WU1HvfB+aTL41JjF16tdDVFFHROTVQzvAucH:LRJkJjP6tXxOxQzvx
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  caddll/Demos/Exe/Win32/FreeImage.dll
- Size 2.7MB
- SHA256 8bebe7b78956af2501003c2098868efa2335f2a3b73e876394dc857071535e2f
- MD5 a047e01e8320bd9169d93548245083a9
- SHA1 b9af6bebd9dc7113c241f981327df09175d99387
- SHA512 942be850986e38d4cd4130113fd8e5d73aa0ecfdee65794cc4562186ab123f142d7f550f83f915e32d996795082f71d904b7301c823af715d292ce182a37c3b2
- SSDEEP 49152:jAcaMg85CKQPtOlIbt1vSIdfS2750tvysqEUNrzPhT0ePh:EtKY7dfS1URb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  caddll/Demos/Exe/Win32/ImportDemoCBuilder.exe
- Size 2.5MB
- SHA256 cecf2985d2e2e8d69bea8d6b52f209552a63a9ee8e78dcbd8a83f05f15290368
- MD5 c5d6ffceb26056e14417ec736582c331
- SHA1 615c1df731bd2a0b154bd5fac59c43f5233e872c
- SHA512 dccf695e9f1d4d15d18354588ccc3c6c826f6d9622db86ae7c8588f28fbb77e215a5024fe47b0876ae40a4fca2859b22865ebf35b841b231040795e2ae169792
- SSDEEP 24576:sCVKTnP6lKeZ3T7dOhWvXc4+1i+7BzSLBYWpnC9OAVFnwaMEtvilvFuNGMQauEBB:sAQEz2J57hSL1dstKPQPfTUN
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral19 behavioral20
- Target
  caddll/Demos/Exe/Win32/ImportDemoDelphi.exe
- Size 1.5MB
- SHA256 32a3c46016ea744026541aa676f69c31176f58794638c8ba9e553281d35722fe
- MD5 841ecea8c37ff3b6805ee89b84025fc4
- SHA1 b977a9f5ae9cac70dc83ad5305f3f61ae21d4d31
- SHA512 1770dc7b338f990ebf7175c3eb4fee70dd515fc2ad2dbd939643acf4d5f7f5d6cd754debc984982cc03a617a15fd91db19766d04c00029408591609672781992
- SSDEEP 49152:Zv9mZvkSNR/atgKhj7SUZsGnv2OjWUAiN8WVTvd/odm:Zv9BDDAiN8WYE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  caddll/Demos/Exe/Win32/ImportDemoVB6.exe
- Size 80KB
- SHA256 451ecee2f7bce6a1b006c2b0355727c04b4236b0f6bb64a6e1ed0401e7f85e05
- MD5 efefceec84f41d4a924f79b33464530c
- SHA1 aa17713ad96ae2915859484c201cbd5237aeec8d
- SHA512 461a799b1d8c97def3cd75086eedb59e36096b220027026ad21d04471bf7157282cd23c4a388c799c63a2bbeac68814c45675875964629fdcc2d7f6b65ac415f
- SSDEEP 1536:AljVWwCmBAA6tP2KlMqbYYFsvahYR+1p9KmvTR:AywCmq1J2axiRcqON
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24
- Target
  caddll/Demos/Exe/Win32/ImportDemoVC.exe
- Size 148KB
- SHA256 0562d8bec81f5e57e73916e6f3b49d649def573ebcd51346da5bf8b2373ee916
- MD5 babd5ca29705375eac4c9685ee228494
- SHA1 6d4b9a0641f530c7ea8768b16bc0242f01048aba
- SHA512 48b6622086dd0dbd63d0c94a90de4396cb0a0fe7349655aa748439f428f42bcff62234206b08fce65045593aa6b8c534b7ac17b87c02fda36dbca74b30f94b08
- SSDEEP 1536:vUjEkcgYdwHagbeCXNvxyt/6UxiZR68pVS+sH1emty2SkoWfaXb0oh1APvtmgMbP:MUg+aag6Hrino+Cv41AHAg0FuGketLL
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral25 behavioral26
- Target
  caddll/Demos/Exe/Win32/ViewDemoC#.exe
- Size 36KB
- SHA256 2cc6f41a2037bedea0df3eead78c0599a3903782ea54c6b019ce6ab851c29222
- MD5 4363a32dbdf995af141842a29f4f8d2c
- SHA1 940c7cdaff63f688b14499d1027b6ee2f4ba28e7
- SHA512 8b3181939944b5705652ef7925a26c7b16be6084cdbee4588a0c5bfddb38d91d376714d3aefa55d1ed9ef88a6ad1ca832baff4beb0459f1c0a48a93cefec7341
- SSDEEP 384:qmbNQ1yT8rSKP0u0sxhlkK/56CUvJvce8cawQtQ/3ULNGoE4/u5jmMR02:qMQ0TgcjstQvc9pGa/c
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral27 behavioral28
- Target
  caddll/Demos/Exe/Win32/ViewDemoCBuilder.exe
- Size 2.5MB
- SHA256 102ec1f78bcc6b827e720bcdeee43f642b59e75c6e654e83411601887d533b38
- MD5 001eb7b57175317b557d129385463044
- SHA1 1c1d23d800441f1090d77c11523259a12514f656
- SHA512 9b5f93fda1e9ce829dfa13a66494e652c6e08afeb956dd68259c38e4c4c2f5e8c6204c1fec30af7eedd1a64689f5b0a8488967fe7d8f3ca37c361f856fdb81dd
- SSDEEP 24576:Rm6YJv779PoGKn9H0DMuqqU9FBYS6YPCJqksdcrgVkAjigDgsKmkn3wwvIW3Behc:oTvWwYFWS6PJsCqj8mw6pTN4
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30
- Target
  caddll/Demos/Exe/Win32/ViewDemoDelphi.exe
- Size 1.8MB
- SHA256 7351e4361641e3cbb8ff4a407eae65ec602520c43708e3af8c8b356aff3bd924
- MD5 7ded0c35300df15a734eed75682b0d3e
- SHA1 cfd307b951dfb053a3e855dac762a1d1733edc61
- SHA512 abbc89b746331e78cb0c03b2cd18c972c1be7736a5af007db6a6c8161ab4657ef5a70f78e9d8bdb09e22ebe7ebc8392c65d77bd383fad38a2f7f69c0f9a5ec8a
- SSDEEP 24576:Lg+2BfrtSSmtQ6YH30Gy3BxBiSBfi8ji2fgootWhrgJIPEkjYsl:A8PGsx8SB3i2No4hrTfjY
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32