b54c21ed489ba0000306c4effc65810c2c4c04e67fbc308707d6aa879087a304

Sharing

Copy URL

Twitter E-mail

General

Target

1ae659dbf86a45c83025dad3b11cc423_JaffaCakes118
Size

245KB
Sample

240701-l87h8avhnh
MD5

1ae659dbf86a45c83025dad3b11cc423
SHA1

1628987c744531010509af7f53d78b223ff9f2a1
SHA256

b54c21ed489ba0000306c4effc65810c2c4c04e67fbc308707d6aa879087a304
SHA512

b6064c0a222359b8bb613a692ad77e6e2f6c419fd2f7f93fcf21f83372e0345d49fe042df51088ee85435db89f56fb7ebacf1c720375e3baad958349be01ac5b
SSDEEP

6144:Ue34q2DU9uW6P/IkjUw9JKIQAcs2GGkiF:R2CupICvrncs2GGLF

Score

7^/10

upx

Malware Config

Targets

- Target
  
  1ae659dbf86a45c83025dad3b11cc423_JaffaCakes118
- Size
  
  245KB
- MD5
  
  1ae659dbf86a45c83025dad3b11cc423
- SHA1
  
  1628987c744531010509af7f53d78b223ff9f2a1
- SHA256
  
  b54c21ed489ba0000306c4effc65810c2c4c04e67fbc308707d6aa879087a304
- SHA512
  
  b6064c0a222359b8bb613a692ad77e6e2f6c419fd2f7f93fcf21f83372e0345d49fe042df51088ee85435db89f56fb7ebacf1c720375e3baad958349be01ac5b
- SSDEEP
  
  6144:Ue34q2DU9uW6P/IkjUw9JKIQAcs2GGkiF:R2CupICvrncs2GGLF
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/AnimGif.dll
- Size
  
  9KB
- MD5
  
  200b6570553d00a76de8a5a6c9587f07
- SHA1
  
  08ca76a84cba8483ab34285d07909e08bdbf4a67
- SHA256
  
  8fb060b77728fbe347e294d1174a732db7cf9c99b187f8f332662c87683fd0a3
- SHA512
  
  01ab8aa80d7d5d3083f2e3016aab5dad29c0bbba18b225a5dde51b3bc6fa4c8c1278aec17d76bc5ee2b9ccb8532c22d79845162f752bba6ee12341b4d64304e8
- SSDEEP
  
  192:gOHvLYKKad68vn0YQRbqLGWSMRH00yQTbxDdHw:bvLXKa0OqRqS1MRH00HJdH
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/BgWorker.dll
- Size
  
  2KB
- MD5
  
  33ec04738007e665059cf40bc0f0c22b
- SHA1
  
  4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA256
  
  50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- SHA512
  
  2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/ExecDos.dll
- Size
  
  5KB
- MD5
  
  ebcf9f71d804abab3c2e5ce4c17dc22e
- SHA1
  
  17d13084e75cbfa5fbfdd0025e9a0ee5772ae765
- SHA256
  
  d387b725afbd2a6f9b44999278d21025fae55b391e45f7751b88dfb13511a993
- SHA512
  
  5576396c2d885c039668d7f401eeee583eb4de39e8497c3aaec32d47f4417a522fe6786c111d50a5fba7570f50e84144ef3a8aea42677d170e79114343c3a4a1
- SSDEEP
  
  48:qNpugCjmWaZ+rnHAUiP9JLw/RHFtly5vorpSpSi7+5HCAx31Oglt6Zlrz9QH96AD:r0W1nHAfPPORHnooAU3xYglt6WwE
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/inetc.dll
- Size
  
  20KB
- MD5
  
  e541458cfe66ef95ffbea40eaaa07289
- SHA1
  
  caec1233f841ee72004231a3027b13cdeb13274c
- SHA256
  
  3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
- SHA512
  
  0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
- SSDEEP
  
  384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/nsArray.dll
- Size
  
  6KB
- MD5
  
  f8462e9d1d7fd39789afca89ab6d6046
- SHA1
  
  7e9a518e15b7490245d2bef11a73f209c8d8d59b
- SHA256
  
  48941e9f5c92a33f1e60a7a844d562dd77ce736fd31b5503c980b49679dfe85e
- SHA512
  
  57dee2253abd7d17d53811d5e95237f9434288518fb043645524a517786db2d8a91df86a6da732c620f12ad0e7ea30a923b8d5f3de386c65bd3ff240bc0dff69
- SSDEEP
  
  96:TjGBPJ762z6gjutipI+h7jz5ozZt/aYfA7EfXxLfAZi:/ix7ibUpIS+Xa1wX2Zi
Score

7^/10

upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  c10e04dd4ad4277d5adc951bb331c777
- SHA1
  
  b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA256
  
  e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- SHA512
  
  853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP
  
  96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/nsExec.dll
- Size
  
  6KB
- MD5
  
  acc2b699edfea5bf5aae45aba3a41e96
- SHA1
  
  d2accf4d494e43ceb2cff69abe4dd17147d29cc2
- SHA256
  
  168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
- SHA512
  
  e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
- SSDEEP
  
  96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
Score

3^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/nsWeb.dll
- Size
  
  8KB
- MD5
  
  84bcf3c71e70d5a6e9dc07d70466bdc3
- SHA1
  
  31603a1afc2d767a3392d363ff61533beaa25359
- SHA256
  
  7d4da7469d00e98f863b78caece3f2b753e26d7ce0ca9916c0802c35d7d22bcf
- SHA512
  
  61aefa3c22d2f66053f568a4cc3a5fc1cf9deb514213b550e5182edcecd88fadf0cb78e7a593e6d4b7261ed1238e7693f1d38170c84a68baf4943c3b9584d48e
- SSDEEP
  
  96:9E1ZgHfHizBkiz1zCuNrwXTP8Jx/N6SCMeNV37bnwXwPML/bUdut5tCsPb2N6nOc:9E1ZkGdbiSCMeNN7LwAY/gd+Oc
Score

3^/10
behavioral19 behavioral20
- Target
  
  $TEMP/instloffer.exe
- Size
  
  63KB
- MD5
  
  202eccd39b1eca6ac7e55c0a511c4ea4
- SHA1
  
  8d6d01767f74dc2d9a91c225f9b43cde9d6f67c9
- SHA256
  
  5b3870363ebe54dc39efbe78327c821ee0da8a6ad71f8df35f9a6240c92cb07a
- SHA512
  
  0cca73c2773256c835d448f4bed204de38fbc42545c7a82f9b06dfe79377af16dc882d6f8cf94de2e2c149fef17aa54230b6fc8b852c97952d33654efe1e0951
- SSDEEP
  
  1536:j0dZEszWriITJGrvopX1VF7CXjl7yZBPRSEvrGqEYiP:jrszWOITsEL50jl7yb5SEvrGqEdP
Score

3^/10
behavioral21 behavioral22
- Target
  
  $TEMP/license.rtf
- Size
  
  15KB
- MD5
  
  a68888617e49a38ecdc9d37d4ad4bb0f
- SHA1
  
  8ead5f3a07309bd43d4a7d3050816daa3eb794ba
- SHA256
  
  b64310f29eeaf0f12c84c015b76af682a1904a4e25a9dcf3619a579d1315dca7
- SHA512
  
  f8120ba06f7fa6c3f6e9e56be21d80deec2e8563fdebb168f9fa16cfe36cbdf84d78d5f750056b82bc6e9653104840f58a6e56cf69e25c60bd8fb64a64d3117f
- SSDEEP
  
  192:doyiN7vCHjJnNCN2N6Sc9wnsmjeA9WxAWRVEzSEfcrYEQxTHzridjlpNoj6RVIQj:OyU4CUoensmmxau0HCxpM6R+QDVsMx
Score

4^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

ACProtect 1.3x - 1.4x DLL software

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24