e11e1d02027ed589370e37310fb3c4e607cc29e305a201dc2cbc04ee94579153

Sharing

Copy URL Twitter E-mail

General

Target
211e2228612b79c62a477d8572c4986d_JaffaCakes118
Size 468KB
Sample240703-feecpasbmr
SHA256 e11e1d02027ed589370e37310fb3c4e607cc29e305a201dc2cbc04ee94579153
MD5 211e2228612b79c62a477d8572c4986d
SHA1 97620f02ff6d7d34d334b31bc2fc066707e3d0b7
SHA512 f7a5d3b61832e9a0095647e63f1dc75c51333403671787aae9dd86a7c63ba7c19cf82d819dc90cdd7a90879825f536f5cf42cbbaffdf164d6bc0435012c86d79
SSDEEP 6144:Ve34w12uoRlo2BFIJLNzOBS44lxytTsRRpTdwqQo5D8jCkjQC/EvK89E4O:IxpJLxOBS4uMKh+Wk98vKOVO
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

execution

Malware Config

Targets

- Target
  211e2228612b79c62a477d8572c4986d_JaffaCakes118
- Size 468KB
- SHA256 e11e1d02027ed589370e37310fb3c4e607cc29e305a201dc2cbc04ee94579153
- MD5 211e2228612b79c62a477d8572c4986d
- SHA1 97620f02ff6d7d34d334b31bc2fc066707e3d0b7
- SHA512 f7a5d3b61832e9a0095647e63f1dc75c51333403671787aae9dd86a7c63ba7c19cf82d819dc90cdd7a90879825f536f5cf42cbbaffdf164d6bc0435012c86d79
- SSDEEP 6144:Ve34w12uoRlo2BFIJLNzOBS44lxytTsRRpTdwqQo5D8jCkjQC/EvK89E4O:IxpJLxOBS4uMKh+Wk98vKOVO
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/ButtonEvent.dll
- Size 4KB
- SHA256 5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- MD5 fad9d09fc0267e8513b8628e767b2604
- SHA1 bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA512 b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/CustomBrandingURL.dll
- Size 5KB
- SHA256 2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156
- MD5 e4c1b74859c17671ffe1c0602fd56b44
- SHA1 15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1
- SHA512 9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925
- SSDEEP 48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/CustomInetc.dll
- Size 21KB
- SHA256 3c0d6c3ee0784b2f10093a927335382f67050156136991f0ae05fa4484bab8f4
- MD5 81e20eb6c3a6002a805265ca751c7217
- SHA1 db0e645b6d22b77b4117fb5612a0bf83c613c199
- SHA512 ae6b594bd6cb42913484b5c5282757a9e8f52e76647bf3ef49555c2080540be683079f7994050a7baa45f7a2f57441fcd23353f351476f2891912ec5d2bfc2cf
- SSDEEP 384:96WBKKhxKPJeXt0OxyfWB9VTZVWav3ARHKpK/V3STMvDya4m0Ac9khYLMkIX0+Gg:99nKPZfUZVzv3ARHKwhSYvWa4uL
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/CustomNSISdl.dll
- Size 23KB
- SHA256 9d7e38855d6f4d6a9428a652f7af14434fbcfddd3451cf2a9303a77b2945a16c
- MD5 c3a070b59e4a67b5a12909da7be29037
- SHA1 bc12f085aa1cf516a7f9b6e7f6aee1a065f3d153
- SHA512 f490ecfa813667fd4b4a71d2ca8f37b47be842fa5d648c21ef89b6298a07a0b3dd98950757613121b33e1d9e135ff275ae863086ab421fbadf06c3a9bd71cd31
- SSDEEP 384:/ZeZo3px0Z87m9H/PO9f9GoC1gpcewiXOiAIe:xe+r0Z6IHAfwoC1gxwiXVe
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/FloatingProgress.dll
- Size 4KB
- SHA256 5caf7bccc7fb43e43a50676a2466803cfb531f6416c6cb797750513770da6e18
- MD5 15bddd79574770cdbab1a9c13832d344
- SHA1 dd63bf21db7049ba9773d0d06dbbb2d9b1ae914e
- SHA512 52f29c250a2426f43b67577ed5efe17992fa9ccb361cd1ad6ec19a60b02e2b7ee1c5a8131a29e37f84636d30916d6d2018ac769483861d1da3b0a1f4c91eb87b
- SSDEEP 48:SBn9+qyt9ofRgODb/ZfKVT60l/5Lh4VzQqO3rwBRbN5:g2k+O3/PIhIc10BJN
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/LuaBridge.dll
- Size 8KB
- SHA256 0c0d9657ab06af5f556e944e333499dfde4fe119acb83cbed3d7744c9aac5b38
- MD5 60351c8bb166e71379f7268d25fba6d2
- SHA1 e9ce69111b1a1c1f11cd99cc2cdff7c91b9096df
- SHA512 42bdce0bfba2bf4b26e77fb33d6680fbbf43c891a4812ca873f621d822d3c93e0f25dd5cc3f31d0772494bcc0ca89ff93386847c0ffb87fab78f2de1d22df799
- SSDEEP 192:ygwF1EUW6DchFSe5z9teSNKBWaeVzQ38WDOOW:ondW64bSqhfK1gQMWDm
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  $PLUGINSDIR/LuaSocket/lua/ltn12.lua
- Size 7KB
- SHA256 688b7d780603fb9aa75f80f178e8451aed347d0112fd526591108a2d4c98ab50
- MD5 3dfc54ef5c4d74c9558b503ea5595d0d
- SHA1 79016426ab7d0d6de6c2316b9ea02d8cbf5fc53a
- SHA512 f79cadff428c375ea174279a9ada186f02fe43518cf0549d24fb1cd3288c1d15377558e59bfe2eda55c7e7b204b04fd37a00a76dbdecb475ac09cfb331043194
- SSDEEP 192:RYfAp6an3GBkiwbbCk2ecK1PAM5k7vxMK+IYlUGoLhA4jxkKQpLMH6Y6Fdhi6zqN:Rp2BkBCk2eYM6xMLXNBFT1wMuDzl2c
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral15 behavioral16
- Target
  $PLUGINSDIR/LuaSocket/lua/mime.lua
- Size 2KB
- SHA256 7d02031927ffd905700fd0c24e1ecd8ceb3ca8d8cfa85d49de2eaac9b43ffcf9
- MD5 6042de20ee4cacb2089388f1038bb92b
- SHA1 855102721c46abc38a5122c41bea1adb6ea296aa
- SHA512 cd5a00182affa97528db3c06b97d3c0c0827b35d6bbd1a48612709692a15fe3d935964c16091f373b38c19bdaf15c52968bca11c3eda5e8ea11ab421a219c661
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral17 behavioral18
- Target
  $PLUGINSDIR/LuaSocket/lua/socket.lua
- Size 3KB
- SHA256 cb1bf14baa252740b8ab681189e746f401a2e2b06086469bb5884e5564b12861
- MD5 f8d9f766ce71816a68c90bb12a29eed9
- SHA1 eda6100bc1dfa511682d7f98c67342b48538eb17
- SHA512 a2f04d91ed4eedce4aead5c07cd7c98e8cc5e3ce03ca3c70705968bdcaf6ce9277e3f3e2965a0dd66e817353511ea8dfb2199aefb207fe5b2fa86f831f9013f8
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral19 behavioral20
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
- Size 8KB
- SHA256 cb373cd081a8ffbc71f67d359a0d2c7b8bc7a4db7ef720364700a534773b2bfd
- MD5 a8fbe980f396bccfdaa5671a981e60cd
- SHA1 c2ae1816545e52347d359475e846997056865db1
- SHA512 89332cd5079cc3b1e2ab2553e7425919a2463b7aacfc51371d0c431160dfc4a0b3812597cc1db43d476c5332d20334d1d904b1edcc2e6ab81415514abe9ff307
- SSDEEP 192:Ib9n9btwO8RiYH21IcNhvU632OzjMxwcjvu0xT+FHWWkbssMPP3IaeevDZYgnVJc:Ib99twO84z1dfvU42O3MFjvu00kdM34x
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral21 behavioral22
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/http.lua
- Size 11KB
- SHA256 64480fe4bc09a432e5a25c10f5818206ff86d44a945045df3bdbf433289c0f8e
- MD5 811e12534358f97907079ec49db9d753
- SHA1 cdecaa0560f73a613f405bf9ec75f16a6478f66c
- SHA512 b827a96c4d681f066c593953ec589cf3cf6f171d5f9474ed00823d92772c231dca39c753ddfcad5ae97bb4734206b3c53fb547a0a4056c652f6032ce945bf4cc
- SSDEEP 192:SsHcg8Z5jISm65NFMh1KoKWperguRbkrCIzokDk+9yuPTTbVVaajhDyh3bbocLmh:SsHcgCj/BK0U6q5B4x8bHRlWh3HzqCsD
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral23 behavioral24
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
- Size 3KB
- SHA256 8b203683437af5a3417f1fdf0b14e404208507830510bce24883f2731e89855a
- MD5 b98814d6a43aa13dd01f78f3b573f4f6
- SHA1 c5b11ac3b388424015dc24981b33301b5765efe3
- SHA512 cc38a537fd6a2aa69ca0902eeada5f446a81c3a3ee813bad0943b7cbc0414798797eb813945b776e06e5c8a52ed6b656e1450a0922d1e53906b53f9f25f01be0
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral25 behavioral26
- Target
  $PLUGINSDIR/LuaSocket/mime/core.dll
- Size 52KB
- SHA256 a1ffee9687ab4a23a78b3251888aff09e2896d76f8d16d713367b265f125188d
- MD5 4a4845ba1666907f708c9c10a31ec227
- SHA1 1ebf626adc84147e5114885ce779f92d6eb68f3a
- SHA512 d009f5e2a2ecfbec5e5e788ade142d612846d0c99921774e4a11b060998dfb0680cf1e1a54604535d5560738093f9ae166866cb23eee5c7d9c4e5cc5a33e7464
- SSDEEP 768:Hk1jtHTV0IuugoXCodH5LjciB9snJ1hTgZNno42L:HkhtHTeroXR3aL0toV
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral27 behavioral28
- Target
  $PLUGINSDIR/LuaSocket/socket/core.dll
- Size 80KB
- SHA256 bfe8445c38ee71240e856f85d79e94123d7179bf43688de0e2a14e32e6ef21b0
- MD5 4bf7db111acfa7c28ad36606107b3322
- SHA1 6f20b9f6663ce0c309a2ce60e718d64ffb6c75b3
- SHA512 0a5e66a65b80e15d8198f2934c58227ae17680f0fbea9865b2f44af82a29c53d4f95cf9616b4dfd75202420eb73b7d962cf2c84fdad6ce26afe1eb4bb978d0b6
- SSDEEP 768:4pOz0XSP1hSt5+5lKfZyDy3TygCk749NRAa1YwqJlfp8iB9jDEu/s5RPOothtlRp:wOws14t5CeTygmNRA0IVh05IoN3
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral29 behavioral30
- Target
  $PLUGINSDIR/LuaXml_lib.dll
- Size 11KB
- SHA256 90f1bb98e034fcf7bfddb8cb0a85b27a9c9ddb01b926b4e139e1e8fc53d41d09
- MD5 7292b642bd958aeb7fd7cfd19e45b068
- SHA1 19a800620d041634abae5b5d096cb0e87ce4c188
- SHA512 bd758e0833454e0aa2af976ac94fde17c5401102c5991887cefbe8e337974381584c73e2d1e50e49263c55c3788e24dc7f8bd0b9d2a76a6cbe38e48dd9d6c44a
- SSDEEP 192:YK/pDHjlL5Fv4k0CSigGpV8pVqVyoyhXnX1:N/L5FqCjpV8pVswXnX
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32