cce315b55368d418f7c32eb2cd0b479a6f3a46b00d194f727f38b10596497d2e

Sharing

Copy URL

Twitter E-mail

General

Target

0e143d9728a748ba6e77beeea8c2ed7e_JaffaCakes118
Size

3.7MB
Sample

240625-pphyaszdjh
MD5

0e143d9728a748ba6e77beeea8c2ed7e
SHA1

eb3bc385abf1cb476aeb89e141291f5fc2684038
SHA256

cce315b55368d418f7c32eb2cd0b479a6f3a46b00d194f727f38b10596497d2e
SHA512

2f0158b7b7729a2886826d3800f020a0dc4eb47933d20375aaf4faa6772fcd47e4ffceaa7e4fa9441927582e1b890036a4ac3ff995be06b8abc2970cc3f6f32e
SSDEEP

98304:tDD1zOx7+PTbYAWDFcLBGuZUB7nw0XcP0Xmof:p4+LIFcLBSVw0XcQ

Score

7^/10

Malware Config

Targets

- Target
  
  0e143d9728a748ba6e77beeea8c2ed7e_JaffaCakes118
- Size
  
  3.7MB
- MD5
  
  0e143d9728a748ba6e77beeea8c2ed7e
- SHA1
  
  eb3bc385abf1cb476aeb89e141291f5fc2684038
- SHA256
  
  cce315b55368d418f7c32eb2cd0b479a6f3a46b00d194f727f38b10596497d2e
- SHA512
  
  2f0158b7b7729a2886826d3800f020a0dc4eb47933d20375aaf4faa6772fcd47e4ffceaa7e4fa9441927582e1b890036a4ac3ff995be06b8abc2970cc3f6f32e
- SSDEEP
  
  98304:tDD1zOx7+PTbYAWDFcLBGuZUB7nw0XcP0Xmof:p4+LIFcLBSVw0XcQ
Score

7^/10

upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  $COMMONFILES/Angels/AgLog.dll.tmp
- Size
  
  298KB
- MD5
  
  eac8960e017bd934b2009f6db2faf03c
- SHA1
  
  709263b55e8002c9acde39ff48eb9b43486d5ec6
- SHA256
  
  5b432e3255dc73277356571855cb782d3a376c9d2a77eec940092853b68319fb
- SHA512
  
  2c27493d946f3696c200b3c8db9bb698a6d8e2dcc8ad94304ca7c34b5d4fd40c735214691dcd294923515831da818a482d4821d0e0b92d162b8734ba07c9e6e5
- SSDEEP
  
  6144:BCv6QXUtiBav//wX4Yz0jfTc3B3QvZusUhm:IPi/wX4YzYfTchQhu0
Score

4^/10
behavioral3 behavioral4
- Target
  
  $COMMONFILES/Angels/Agwin7.dll.tmp
- Size
  
  60KB
- MD5
  
  71c71a81864920b3c993500370bd24cd
- SHA1
  
  1afdb9e97970741728788c3aa4da83de0c1893ec
- SHA256
  
  07a15218c0862b9406e3a1002c0dfedac2fbad69578add537d5ef23961d36d9b
- SHA512
  
  f4737c417e9370144409bc762f2a9067ec23c08359835f3c1191af5449c2f9ba72656cef4003309ad5f3a2b1878f3cadc34ef801414122b7b50ba66a2ce3e960
- SSDEEP
  
  768:kpdcLGMKEfsu1nWmmR2LEY2t7bXrvSZYA8YKU1r15sD+ewMLEUbGq:knLMWTR24Y2tHXrv0hLrK+eF4QGq
Score

3^/10
behavioral5 behavioral6
- Target
  
  $COMMONFILES/Angels/AngelAsst.exe.tmp
- Size
  
  121KB
- MD5
  
  fcddb14984babda702a989a4182724d2
- SHA1
  
  8220a6486fa2d5b3fdb5e936d372c4f13438f015
- SHA256
  
  57d2ed4d5ffce987eba4321a055f6c2f74f94a09ec13053205462f205df33fe0
- SHA512
  
  5f813e63e717df87c7f516e7b4e7b2daf3550d36f0d5347dd82e25f174eef5f0a3c615abdb3619f55f562d270c92af934acc06b50218dae892f7d531f7f390a5
- SSDEEP
  
  3072:GHrcfb6juHeNxHlbuL9hKNIVu2f+FZKPSxE:GHrcfb6juHmlSL9hLVu2cZJE
Score

1^/10
behavioral7 behavioral8
- Target
  
  $COMMONFILES/Angels/IE360.htm.tmp
- Size
  
  932B
- MD5
  
  4e72a0d4ecf37f91b9fc9fd2e27a6661
- SHA1
  
  c3e9117731947e1a3e2f9aaea9356cedf5fe53da
- SHA256
  
  609471ce7403a914ef23d91082242c876e1b2ffcfcc6a70ab1309f45b387d1d4
- SHA512
  
  ffc517b819c9e995f0aadef0583b099b16bff262315a9f27ba1c6306d0e0fde30c32ecaac19fdaf9584f182b64677699b42d40606f4038637485b2b5601d79bb
Score

1^/10
behavioral10 behavioral9
- Target
  
  $COMMONFILES/Angels/IEMenuExt.dll.tmp
- Size
  
  194KB
- MD5
  
  1a26eb91738581840fcbd973f24bb292
- SHA1
  
  ce2e252ed95eac8d0a0c2d113da8abc592114e3e
- SHA256
  
  2a42a068f1c668c8dc10259838fb79b7d9c9812cfd3ffc50a812e3b9086c8653
- SHA512
  
  4b63126b93651cb8911c874b87f9fa181bfd3dc1e958332543d1a60e1d1f4412980c6cf6ea5e8c782e51dfc9eefb2c4e3dab1853dcff779c92d2336d9f843361
- SSDEEP
  
  3072:qqHWSddWrkqTQslbv7mfpAQx0F9OS8jouaTX5CEoHgr5Aa9+gUtERO41kRb:qCW4r87y0POJvakEoHk5Aam7h
Score

1^/10
behavioral11 behavioral12
- Target
  
  $COMMONFILES/Angels/IEScan.dll.tmp
- Size
  
  60KB
- MD5
  
  787864c00db5eda273e0bad7b7ca743a
- SHA1
  
  851e8451731046b90ac73ffda6953614e57079e5
- SHA256
  
  7b025ad00e154298bdf1d5dd32b57e2f454bc90f909221b08e8ed0576d5eb86e
- SHA512
  
  49154e17a35e009d0f68eb6764e06398fa485486959bda69de2639bc57c1b3014d364f4dd8da2bc9e57ac384817a30e5f44812bbd1e7aa3b6236e274ffd45eb4
- SSDEEP
  
  768:2Q0Uz/q4DHd5IytXGU1ZclADgN87Hra48fd+R0iyQpH/xL53+SeeKWr392LEUbGB:X0f4D9yYJlDgMgfdtyt/P+Cj924QGB
Score

1^/10
behavioral13 behavioral14
- Target
  
  $COMMONFILES/Angels/IEsafe.dll.tmp
- Size
  
  1.0MB
- MD5
  
  7ca8acb7530cf66e045343afa110dbe0
- SHA1
  
  13813886ba5984070a8a45e49c0d5e2c4bd3f08f
- SHA256
  
  26a1b5254b7328b2474c8a587666cfc87cd88b9e177ea1f0017a6fa85c19464d
- SHA512
  
  9085464dbc8cc4729329e00eab1b4fe801b4d51711f99a4e58d4c385a3a4dc84b9e8d439115aeaa77cbbb44c0b2921f825e0ac8fad79d720adab36055060f30e
- SSDEEP
  
  12288:3vpDPQj8YycROwCH7JrNxfhcfVuOfkY066ZB/25tbyoVmmjyHe4TBu1pJLROj3LO:fLPrm++ou1p2j3LTY9JlF
Score

6^/10

adware stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral15 behavioral16
- Target
  
  $COMMONFILES/Angels/Scan.dll.tmp
- Size
  
  1.2MB
- MD5
  
  ab485a10cea9edfe33a72644ec694200
- SHA1
  
  2a09b25627eb94c2d64028afb5b72fe2de4ab08a
- SHA256
  
  895544417f5fae379e94897c5c16a0f48af6e132cb196cf4d0feb9edbf673b5b
- SHA512
  
  fd56cea87a743b85091c4ef9e85c7407e9cbfb4d8b22b6d173ddc6a5cd157d27d6bc1fee028f02ce51878774deb1ec518e4764075e976b121ba2baf578f54a48
- SSDEEP
  
  24576:AgcIwdCFEXGwz6Ff78H8KZ7SI7ErlB6azPTkkkkkkkkkkkkkkUkkkkkkkkkkkkkk:AgcIwi5nQ24EreytZ2cY
Score

3^/10
behavioral17 behavioral18
- Target
  
  $COMMONFILES/Angels/WebSafe.dll.tmp
- Size
  
  411KB
- MD5
  
  27a195cbea12fa20c3c041cf43c31d20
- SHA1
  
  eec787243c6b2ed54a8d1ed65452b7ac0c4b30b7
- SHA256
  
  482d9fef60f9f8da719141b4481783951ceef39f832a66b176b8525d8a7518fe
- SHA512
  
  c7169ad6798bcb650baf913b9b9c4c7655487ab34800e33318c31826498a5297ed12ddcf72899b7da39615e0f524be0856293492183b5ce4b6f81215b1f2b60b
- SSDEEP
  
  3072:M6o/IOSN2Qv32fQNA6rPEvDKke+8q+g4+gECW5:MZ/IOSNPfNjrPebMpg4S5
Score

3^/10
behavioral19 behavioral20
- Target
  
  $COMMONFILES/Angels/go114fa.exe.tmp
- Size
  
  26KB
- MD5
  
  be4cb0b0f6b6b2392e4df25ac7a1ab60
- SHA1
  
  445d5b3ad9d14231caa5db1b2d899f37430a63c1
- SHA256
  
  5b1a692e365eaa612e11e4f7161b2e2223b3f8171a18516368d646c16bd53e2c
- SHA512
  
  fce748853a7f2e524f60c03b6587349c09211648978a9470c9980976b8830d0689a2876f60a6358f5dd8c5d886325b75ace982679ecaf6f9863a96d5d1a00646
- SSDEEP
  
  768:JicxqkQ0OJQSf5Q4bDb87SSFAuJJ2m81LLEUbGNl:wcxqkQOYDb87ZFAuJJ2z4QGNl
Score

3^/10
behavioral21 behavioral22
- Target
  
  $COMMONFILES/Angels/xFoCtrl.dll.tmp
- Size
  
  161KB
- MD5
  
  c36c9659941e30c5a296421250f4ce74
- SHA1
  
  b4dfd3a90798474108e061fa4130581171679d40
- SHA256
  
  76f33de89d28c74c9e90939fcaf2aefc860c479e2e494986b4a75783957ea956
- SHA512
  
  328faadfb244761ee860dcfa2913900f790510e16f4799fc6c49a5a57d0f7796718655472224a6d004d2a570c0f6492dd0549a49d6759496662c9120776e8a8b
- SSDEEP
  
  3072:g8nvO1B0Rn+rXBllu2jMLaj6ocVkTpS+lsOJx1j:Fnv9Rn+/faPbeIjsj
Score

1^/10
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/FindProcDLL.dll
- Size
  
  31KB
- MD5
  
  83cd62eab980e3d64c131799608c8371
- SHA1
  
  5b57a6842a154997e31fab573c5754b358f5dd1c
- SHA256
  
  a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294
- SHA512
  
  91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9
- SSDEEP
  
  384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy
Score

3^/10
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  32KB
- MD5
  
  83142eac84475f4ca889c73f10d9c179
- SHA1
  
  dbe43c0de8ef881466bd74861b2e5b17598b5ce8
- SHA256
  
  ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
- SHA512
  
  1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
- SSDEEP
  
  384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score

3^/10
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  14KB
- MD5
  
  254f13dfd61c5b7d2119eb2550491e1d
- SHA1
  
  5083f6804ee3475f3698ab9e68611b0128e22fd6
- SHA256
  
  fd0e8be2135f3d326b65520383a3468c3983fa32c9c93594d986b16709d80f28
- SHA512
  
  fcef8ac5bd0ee6e316dbbc128a223ba18c8bf85a8d253e0c0877af6a4f686a20b08d34e5a426e2be5045962b391b8073769253a4d9b18616febc8133ccf654f7
- SSDEEP
  
  192:t5ZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRYgsfA:fBo/680dCI5adOjFOg9//p27uNw2bo
Score

3^/10
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/OnTop.dll
- Size
  
  3KB
- MD5
  
  7c0c240e911a521e8e554a10d04e558f
- SHA1
  
  d12ca9c464f2764e211039c09e56cb347626f7c7
- SHA256
  
  28cf47c05c86b2264ea1da120d3644cb46c86d6f27072a9a853e63e05ec97a25
- SHA512
  
  579b6787061efdc7f618f3c5a513cb539ccbe12ca41ba5e9ba8f00d03600edcdd82262b0fbfd58b96231c461f18b1233d657cbd0d1b827ea9df5374508578707
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

T1176

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

UPX packed file

Installs/modifies Browser Helper Object

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32