dbb4b94d0c47becbc462509af38fbc1a38a91809b44d318260e6a3c6e846749f

Sharing

Copy URL Twitter E-mail

General

Target
18677673a4fcc32c112683be8e3fb132_JaffaCakes118
Size 11.6MB
Sample240628-cjhdcsvhlf
SHA256 dbb4b94d0c47becbc462509af38fbc1a38a91809b44d318260e6a3c6e846749f
MD5 18677673a4fcc32c112683be8e3fb132
SHA1 32509dc3c7ef6f168208bc6113c39366430a7049
SHA512 bbf7d37bd3a60bf31e6b897f8ba073ae19730c1046997aa329f5ef5b2d9b1c5bb084e7c4776a934d324a5c834e4cd509e3731175802976ee5b89f3523de8e8fc
SSDEEP 196608:2WRlNkD3533EKQTzzDXMyUY/mB1iq67CPDKFXdim5BlIjdfZQ/dCXx8X0D47tNX1:2WcEHLXMyUY/6iD7CPD8d/5IzaJvBNX1
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Targets

- Target
  18677673a4fcc32c112683be8e3fb132_JaffaCakes118
- Size 11.6MB
- SHA256 dbb4b94d0c47becbc462509af38fbc1a38a91809b44d318260e6a3c6e846749f
- MD5 18677673a4fcc32c112683be8e3fb132
- SHA1 32509dc3c7ef6f168208bc6113c39366430a7049
- SHA512 bbf7d37bd3a60bf31e6b897f8ba073ae19730c1046997aa329f5ef5b2d9b1c5bb084e7c4776a934d324a5c834e4cd509e3731175802976ee5b89f3523de8e8fc
- SSDEEP 196608:2WRlNkD3533EKQTzzDXMyUY/mB1iq67CPDKFXdim5BlIjdfZQ/dCXx8X0D47tNX1:2WcEHLXMyUY/6iD7CPD8d/5IzaJvBNX1
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/BrandingURL.dll
- Size 4KB
- SHA256 bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
- MD5 71c46b663baa92ad941388d082af97e7
- SHA1 5a9fcce065366a526d75cc5ded9aade7cadd6421
- SHA512 5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $SMPROGRAMS/Âå¿ËÈË2/ÐÂÔÆÈí¼þÏÂÔØ.lnk
- Size 344B
- SHA256 c755fd0b870f2367e644f899afd720c4aee7b019b5584a14421c407e7910de14
- MD5 4c2a7c403e0c28333f645a363f606da8
- SHA1 fe61f5e318e323fab9af329245e4bba6128aa5c6
- SHA512 8516481f41413d3ec958a07af39aad889840f964d7cb1f8027142f9c65abea9821e3bf2fcfdd9fb2b1c676031d3096d478bf06586deaaac05a7d451b0c2146e5
- MD5 SHA1 SHA512
Score

3^/10
behavioral7 behavioral8
- Target
  Mame32.chm
- Size 115KB
- SHA256 ad8b509ca1471c69c052230777cd14a5ae947e9e9a2ab3553be797c3b9af80a5
- MD5 a197174720acb2e0917253e6c983ddb9
- SHA1 707dabc9c496239d818f57d6dcc9029350adfbe0
- SHA512 6952c3e703feee7e96e4a12e6443322e8629aa74104d806e6363d03eb79d6c9f309661d50f50257b4a526ca3b8dfdd7ef3e02fc096942686e1d25dcc9c957ab3
- SSDEEP 3072:0+QtQ9EkuJDop9QuUdr2pwCGTC+0vCC0PzJYOwMsU:0+QtQif+p9QttEXh+KezJH5
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral10 behavioral9
- Target
  kailleraclient.dll
- Size 31KB
- SHA256 454440aeedb3b569bf49f11c953d0d5bb8ba42ff60d58c8ae6696eecc920280e
- MD5 919aceb24360595da69d975e08a08ea5
- SHA1 15d2a05133047fabeee62de7d5df533106d29f2b
- SHA512 358fbcb31db1ab882c9ed7415be96962f5a22eec6417ef1537dff95271cee3cb4f7c8eb7685b8f5cdce316d530ac23ff303ace68d2cf83d8decb221b6789dbcb
- SSDEEP 768:2LiLjbKGY60H17PJc/TG0BXOZDRmDOCjq/:UK/Oh17PeqAgDRmal/
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral11 behavioral12
- Target
  mame32k.exe
- Size 3.4MB
- SHA256 bc3195c50eac0cbf4591bea14aa5666b7ec71c7a0c3185a4dd3a77608442726a
- MD5 635f4bedc82b1f90e40919130685e972
- SHA1 4e966f3dd0a3f4018f0af3e936deab90df6b9e70
- SHA512 8f47d846afeffe4b0221ba9228588fbda11051040526c2194e313763b1ce9499443f80e223759e39ffcd8c36cffbacc82d7da5a73cf75e9e108102ce3b7f240a
- SSDEEP 49152:JYjAmLixk+br/lLH6CHBXB5tus9x2gLoMRRcU8SsdU6un+vQIas3uG0KbN:JY1ck+f9zTBxjnL2JU8e6pQM3N
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  uninst.exe
- Size 66KB
- SHA256 fb89af8a9da6bb598d80ce0d9f7fd30153481cb61c84544fe091c41aeb5fdb10
- MD5 0f41245212d62872820929a2cf5ec2bc
- SHA1 5d232092927a7a8ab1f128610af1b3affd916657
- SHA512 a79402a289cb5a8cecbcd7ae816d4bbd3bbda373b57a83d621f28b88bdf63a601c45c6ca8b393704637725496b99a71e103b9a282090b6f7f0793035f846dd00
- SSDEEP 1536:shq3+uta99Hj25XvwLXJLiFYRN6QcIwpl6Sx:OstajHKBvYXJLYq44Sx
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral15 behavioral16
- Target
  zip32.dll
- Size 132KB
- SHA256 76a5e818a126e420bff92c0da8faae6987a04fe273388da7d83cba7d30526e0f
- MD5 95a9097e1a76dfa1141eb8a6e3094e6a
- SHA1 3af4b2116d663dad207ab2aa0994ba78c58beec6
- SHA512 df86defc1f2e0994c54b7cf544a892cbc9a743138cb2e38396b62d32e47871410c3b75586be78ba89777674fe1eee15af66407edb460b8db5c2496a62fe11332
- SSDEEP 3072:xJyyFyyqlFbPm+lmUE5gV1Y4P4csxMwUtYojrOV/k:DyyFyyqlFbPXlmvo1Y4wNMv
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  ÐÂÔÆÈí¼þÏÂÔØ.lnk
- Size 344B
- SHA256 c755fd0b870f2367e644f899afd720c4aee7b019b5584a14421c407e7910de14
- MD5 4c2a7c403e0c28333f645a363f606da8
- SHA1 fe61f5e318e323fab9af329245e4bba6128aa5c6
- SHA512 8516481f41413d3ec958a07af39aad889840f964d7cb1f8027142f9c65abea9821e3bf2fcfdd9fb2b1c676031d3096d478bf06586deaaac05a7d451b0c2146e5
- MD5 SHA1 SHA512
Score

3^/10
behavioral19 behavioral20

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

UPX packed file

UPX packed file

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20