3ce6061c6ba624ee1cfef7e08127aa8e1287c413ea15a0ce174f830920a9582d

Sharing

Copy URL Twitter E-mail

General

Target
a804ece5d512a297f3a16f2752e9722a_JaffaCakes118
Size 769KB
Sample240614-e7sv4sygrp
SHA256 3ce6061c6ba624ee1cfef7e08127aa8e1287c413ea15a0ce174f830920a9582d
MD5 a804ece5d512a297f3a16f2752e9722a
SHA1 b0918998b1359b138442a6546e8bc22c8c93090d
SHA512 43043d19d8fa47c2b271fe28977eaa43920de6515344e07fee1a565c797e4931f204e833864a9fa5bf72165e64580bc36dedb77d3b8b5180fd1d241cdb028b6a
SSDEEP 24576:ncP9Edni7Ccb4DUZDIIHscLOll8EuTm4Av004bJd5A8f:clwniwAJssOHuTm4Av0LbSU
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  a804ece5d512a297f3a16f2752e9722a_JaffaCakes118
- Size 769KB
- SHA256 3ce6061c6ba624ee1cfef7e08127aa8e1287c413ea15a0ce174f830920a9582d
- MD5 a804ece5d512a297f3a16f2752e9722a
- SHA1 b0918998b1359b138442a6546e8bc22c8c93090d
- SHA512 43043d19d8fa47c2b271fe28977eaa43920de6515344e07fee1a565c797e4931f204e833864a9fa5bf72165e64580bc36dedb77d3b8b5180fd1d241cdb028b6a
- SSDEEP 24576:ncP9Edni7Ccb4DUZDIIHscLOll8EuTm4Av004bJd5A8f:clwniwAJssOHuTm4Av0LbSU
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2
- Target
  $PLUGINSDIR/GetVersion.dll
- Size 6KB
- SHA256 7d76c7dd8f7cd5a87e0118dacb434db3971a049501e22a5f4b947154621ab3d4
- MD5 5264f7d6d89d1dc04955cfb391798446
- SHA1 211d8d3e7c2b2f57f54a11cb8bc4fa536df08acc
- SHA512 80d27ee2f87e2822bd5c8c55cc3d1e49beebb86d8557c92b52b7cbea9f27882d80e59eefa25e414eecee268a9a6193b6b50b748de33c778b007cde24ef8bcfb7
- SSDEEP 96:E12Z84uiwpGTVTDSpaHYfniz0R3GhCvXY6Ix5vdR7pBi46AQ5Vu4:2STVTGwYhR3GhCvy5vH7pBi46AQ5Vu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/Math.dll
- Size 66KB
- SHA256 0598f7d83db44929b7170c1285457b52b4281185f63ced102e709bf065f10d67
- MD5 b140459077c7c39be4bef249c2f84535
- SHA1 c56498241c2ddafb01961596da16d08d1b11cd35
- SHA512 fbcb19a951d96a216d73b6b3e005338bbb6e11332c6cc8c3f179ccd420b4db0e5682dc4245bd120dcb67bc70960eab368e74c68c7c165a485a12a7d0d8a00328
- SSDEEP 1536:0P43WZ4Ql60gam+2MwRmPeqFVHbQH0ZZ1Iet:0wU609VMH0T/t
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  CompleteScreen.html
- Size 9KB
- SHA256 86221e5206b6ee0c846f586eaacdf6d19525bac0150505cb83d5ec58b35426b0
- MD5 4df926b8c628348262ced5501069c7bd
- SHA1 a799813dab4e28e616bb379cc8c5a689df4aa273
- SHA512 59c92b41223f730b020b868e752af86d0cfe9ecc09e9946c787f451d47fe99a1df36263a1060cff7a6a31ebf3239099e5df2924783d583b31547c34d618304c1
- SSDEEP 192:SI1yaybWZ6QodpdCYv71QXABcBi9ikkiniNizowQvSwQj4It:SI11ybrhl1uABcBi9iviniNizr
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  InstallScreen.html
- Size 9KB
- SHA256 4d86b36c86907b34e7631f2ea28c6306a851604caa4deed99409f616a11c44ae
- MD5 eeae93190e02e53c256d99c34947c498
- SHA1 3ce43fbf28a287159762294430cf3c6a01fb7071
- SHA512 9d43190765d5ad20399f6cc6f4dbfdadfcba39b6e32ecbf3c329520a72377729859641588d83e5904c43e737d773486f502bf6c3932cd11f553e0b9d1c1207c0
- SSDEEP 192:SI1yaybwZ6QodpdCYv71QX2Bmfi9ikkiniNizowQiwQj4It:SI11yb5hl1u2Bmfi9iviniNizd
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  InstallPrompt.html
- Size 5KB
- SHA256 97038d10082353fcc1924004430f36ca8ecd74fe7a67bf4fc6ae3f4c290fac0f
- MD5 6e9714d235aae2e8f7102ea2b89ff74b
- SHA1 0df7a08ada3a5bd082264fd2ade7d8c478aff5cc
- SHA512 9c23660cfd9957b829a70b13191b9486f4636791407cec35040d2c286340a71a316641a7244a1ea9e94c50561ec54396174cb0126fcfc31d1f938d9b4fdd47ad
- SSDEEP 96:SI1lZUYEd43JOdf9oPKjcjtA6jmxj8bbbqPK/EltTYW:SI1zLJSfVu/jIj8bbbqPK/EltTYW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  InstallScreen.html
- Size 5KB
- SHA256 625ae4f37090e8c5fe0515a51a4bcb4fd2e8388498527ebcd42ceac7c2d4d414
- MD5 5b2947b18f290f032e7836531097bd3e
- SHA1 a4110cea705a5f836f1d76d5cfe5d4f0f923c933
- SHA512 9d61ac5806a46ab4e4f4bddc72179c3ebacec185987c83f7d891d46a6168a6d4e76487a0d6c251087194e08aa25d0d75861e02cb9115752b249250b37ab9956b
- SSDEEP 96:SI1lZUYEd43JOdf9oPKjcjtA6jmxjebbbqPK/EltTYW:SI1zLJSfVu/jIjebbbqPK/EltTYW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  WelcomeScreen.html
- Size 5KB
- SHA256 59d23122b2adc2e656145dbccfba45dfca33fc3db9fb9a42fe26a4d02f5901fe
- MD5 1f4bfdf66d6903dbb746134e91f26bef
- SHA1 fce29730b54c9d1c681f09b0b5b0f88bd4d8eb73
- SHA512 3ee71af8a2a54d5b0522d880b0767dd84017f65d667d1bcc2dcffe20eb3d214e002310f5ecaaf6021e3c4a711a887719b921e129cf50bb4b15d5e0950ac03d6a
- SSDEEP 96:SI1lZUYEd43JOdf9oPKjcjtA6jmdjiQXbbbqPK/EltTYW:SI1zLJSfVu/jCj9XbbbqPK/EltTYW
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 564c80dec62d76c53497c40094db360ff8a36e0dc1bda8383d0f9583138997f5
- MD5 7579ade7ae1747a31960a228ce02e666
- SHA1 8ec8571a296737e819dcf86353a43fcf8ec63351
- SHA512 a88bc56e938374c333b0e33cb72951635b5d5a98b9cb2d6785073cbcad23bf4c0f9f69d3b7e87b46c76eb03ced9bb786844ce87656a9e3df4ca24acf43d7a05b
- MD5 SHA1 SHA512
Score

3^/10
behavioral19 behavioral20
- Target
  $PLUGINSDIR/balrocks.exe
- Size 149KB
- SHA256 f5584a7fdeaf5b005d48f956b00602c6ca53784341282f6e8235d4c26fe6a26a
- MD5 05ab0f3de92a6afcf2f81b80e31ebd3b
- SHA1 ccad0063e6cef6604c35ea17f57bf1d94c01a8eb
- SHA512 7480060f7e70f3a1e7b8f49959a187f2974169d9db96fef72589c3cacae8e69e743c29b91b5521e0ca79dee9d0e832fb18d3a39a0a34711ea74c12104f4a7daf
- SSDEEP 3072:pY4FizYxCDRXJePxUxhp8OiHMgtzXHoL5MIW665A8W1x3EAvf+4DBiRx:pFJ0s5Uxhp85t5q2pd5A8W1ZEx6iP
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral21 behavioral22
- Target
  $PLUGINSDIR/blowfish.dll
- Size 22KB
- SHA256 053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae
- MD5 5afd4a9b7e69e7c6e312b2ce4040394a
- SHA1 fbd07adb3f02f866dc3a327a86b0f319d4a94502
- SHA512 f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511
- SSDEEP 384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral23 behavioral24
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
- MD5 e541458cfe66ef95ffbea40eaaa07289
- SHA1 caec1233f841ee72004231a3027b13cdeb13274c
- SHA512 0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
- SSDEEP 384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral25 behavioral26
- Target
  $PLUGINSDIR/loading.html
- Size 3KB
- SHA256 cf7c0a8543725a0d29e29b36273b64256b6d0e574a04ede6396f51d74aa0c25b
- MD5 aba9d87b34bfc10cae08bc6af020afcc
- SHA1 41972139244c88348873d4504038a1d17c1d986a
- SHA512 704f14877104dd085db5e41fab81637f890dedb59527b6297e93c706797d2e44428663edfaa3c4ace513aa62c3e08484a6362c24438905feafcde4546e458a7c
- MD5 SHA1 SHA512
Score

1^/10
behavioral27 behavioral28
- Target
  $PLUGINSDIR/manlib.dll
- Size 25KB
- SHA256 5d39bdd81b123645e3f7cc1006deae96dbaaabe71946e235897a50fbb314e125
- MD5 94ba775c8a1f4d6c9bb1966eddce22b5
- SHA1 4ed1946ecfb758cc0f68aa452401b37454a107d7
- SHA512 5f42ac7bd636ed372d4bc8d0c140007e2123cbf82effcacd388d67aedaef54110f9a01463d293016c2487de9f2725cefdc6f4e59e78c1bd6fb3f379e721c6e6e
- SSDEEP 384:TVYyb6btb0e4JNvPuzsVAAah1vrmCBeGznQf58bt0Ac9khYLMkIX0+GGxky8oOwb:TVYybKhg2snCBPnQfCb/Ow
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Reads user/profile data of web browsers

Loads dropped DLL

Reads user/profile data of web browsers

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32