110578f07764b3635afe1843828987aed1213f4b14d9bfda1d6139a63bcad93d

Sharing

Copy URL Twitter E-mail

General

Target
a7da076cd4ee0e902c14b4e83d381738_JaffaCakes118
Size 301KB
Sample240614-d1d8psxdpm
SHA256 110578f07764b3635afe1843828987aed1213f4b14d9bfda1d6139a63bcad93d
MD5 a7da076cd4ee0e902c14b4e83d381738
SHA1 cd41e7513de4f89129f89469921e4b7ef609d901
SHA512 41bf3324ed186543619869120a035003cdf34c693718fec806451a4be7ef44c8528e63ebf2d135337f07489ab9c2b956bf638da318ab97c31d7af65d7009da23
SSDEEP 6144:6zfj/8xGSIVKNIvCbXJcOalNF3WvQzwRNh4VcI9yEP7M:w/8bWacNDURTI9yE
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  a7da076cd4ee0e902c14b4e83d381738_JaffaCakes118
- Size 301KB
- SHA256 110578f07764b3635afe1843828987aed1213f4b14d9bfda1d6139a63bcad93d
- MD5 a7da076cd4ee0e902c14b4e83d381738
- SHA1 cd41e7513de4f89129f89469921e4b7ef609d901
- SHA512 41bf3324ed186543619869120a035003cdf34c693718fec806451a4be7ef44c8528e63ebf2d135337f07489ab9c2b956bf638da318ab97c31d7af65d7009da23
- SSDEEP 6144:6zfj/8xGSIVKNIvCbXJcOalNF3WvQzwRNh4VcI9yEP7M:w/8bWacNDURTI9yE
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/IpConfig.dll
- Size 114KB
- SHA256 ec0f85f8a9d6b77081ba0103f967ef6705b547bf27bcd866d77ac909d21a1e08
- MD5 a3ed6f7ea493b9644125d494fbf9a1e6
- SHA1 ebeee67fb0b5b3302c69f47c5e7fca62e1a809d8
- SHA512 7099e1bc78ba5727661aa49f75523126563a5ebccdff10cabf868ce5335821118384825f037fbf1408c416c0212aa702a5974bc54d1b63c9d0bcade140f9aae1
- SSDEEP 1536:CPDzpyvLtmY7SeAmhPzV8+i7kRuACUxHf91MionF9JTwrLPG5zfO+lP7:UZl1e7L4ARzC3dwrLPG5zG+lP7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/WmiInspector.dll
- Size 104KB
- SHA256 a9347413de4b0f90cac0b5e300cec9c867bdb28bd7a60d07b10fd31ee56c60cb
- MD5 8531346d16fa5d4768f6530d2eb2b65c
- SHA1 153601d36aa0ddfbc597b1e890917364878791ca
- SHA512 f214e75de20edeb7eece02659fd7dafc8c3d63c2350c58825bc6e9ce0b73237962d8273b4bc803a2f304cee9f9cad1cd4edab28322c1e678bc25eb88faa6a841
- SSDEEP 1536:V8FVCqSrlWzXRaGDejG4jsenxiqIjF3/BWBk7/lU6wt1bA:OaqSr4XkGuxny93Vwt1bA
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 096a4dc5150f631b4d4d10cae07ef0974dda205b174399f46209265e89c2c999
- MD5 f02155fa3e59a8fc48a74a236b2bb42e
- SHA1 6d76ee8f86fb29f3352c9546250d940f1a476fb8
- SHA512 8be78e88c5ef2cd01713f7b5154cfdeea65605cc5d110522375884eeec6bad68616a4058356726cbbd15d28b42914864045f0587e1e49a4e18336f06c1c73399
- SSDEEP 384:voJLJVqG5WLJgu/Emx1Ywxd2ZmX66vwUhU7ya4LC0Ac9khYLMkIX0+Gv8gcLom7:AJVkN8mHYwxdWmX3wUhUua4LeT7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/t1.dll
- Size 4KB
- SHA256 510af8083c0eef8b04e1171a9d6d94c64a1859701bbb106c565d2ec869437661
- MD5 058ba8a0916d957d3b91d08ea2e876e2
- SHA1 1a7c36c50c5bd93f535b624a2882bc3905e7e7f3
- SHA512 24124b45bf42e186a06fcb71ca7e2c1fed3b762b681286185d7cdff53b3800c35b6326a6f21c82e9de59d8bbcb3fdab4a5c1cc9c8683e43ff230b07913d26f02
- SSDEEP 48:a/1/wEVQWsasy/372nPbws6KcSCcqGTN5gXwvl9g6P:81/wise/37upcpcqGh5gs
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  IWsrv.exe
- Size 55KB
- SHA256 a4bf8d0d48d801360650eb35a8ef7687e2fc3b48fd44034a099bdaf05884abfb
- MD5 8f5a316e8d2494be1a76682cb1f7d70e
- SHA1 162ff17c9c1c07a59b906f798f7bb99cbc064113
- SHA512 2b043d85c8983afe7b34c04f44fa4ad789bd0e1eacc4fb69cbcc5d42b1bed8e31778d095db86e8096b9e548e74fc4ec8ad74e72834a3b6881aa4f634ee52231c
- SSDEEP 768:0pNEDsXQ8wS5psNs789MU7WjmhaPf97AbkkFEDHFnjhNwB/nP/j:0OsXcCeNsYMUBa3SknI/n
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14