c0127a2338563773536beba39ad5f3f2605a6639856ba67e44273af9369f201a

Sharing

Copy URL

Twitter E-mail

General

Target

2f4e166758662a78d107f831d77dc288_JaffaCakes118
Size

3.1MB
Sample

240709-g827aasgjh
MD5

2f4e166758662a78d107f831d77dc288
SHA1

d1bc82e4a0cba8b118f34d8cc752de9ac55c36c1
SHA256

c0127a2338563773536beba39ad5f3f2605a6639856ba67e44273af9369f201a
SHA512

75762fce4dd97aa8cfe00c7beb6c683e56f585a738029fa044937c1597c4366b7f53e10050d254b142fbed2a2d740b82e21216c7e6f49d2b933c8c398e2e9e06
SSDEEP

49152:cizzrZSEA9pxyKVE7cv0wB2/b5OR99qi6jjfU+VmqmhaypYawkHIW0P2PJWP:jPZrofOccwo/gR6i6cYZyouH0e4P

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  2f4e166758662a78d107f831d77dc288_JaffaCakes118
- Size
  
  3.1MB
- MD5
  
  2f4e166758662a78d107f831d77dc288
- SHA1
  
  d1bc82e4a0cba8b118f34d8cc752de9ac55c36c1
- SHA256
  
  c0127a2338563773536beba39ad5f3f2605a6639856ba67e44273af9369f201a
- SHA512
  
  75762fce4dd97aa8cfe00c7beb6c683e56f585a738029fa044937c1597c4366b7f53e10050d254b142fbed2a2d740b82e21216c7e6f49d2b933c8c398e2e9e06
- SSDEEP
  
  49152:cizzrZSEA9pxyKVE7cv0wB2/b5OR99qi6jjfU+VmqmhaypYawkHIW0P2PJWP:jPZrofOccwo/gR6i6cYZyouH0e4P
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  
  $APPDATA/seemao/config/Common.dll
- Size
  
  143KB
- MD5
  
  734a5cc2aa3196895e88b49b88a2177a
- SHA1
  
  cbe7aa0953d8388d155e3d890d7d650cf2308b9b
- SHA256
  
  c0f794f2fe8e73ad1c615eff4f7cfa9aca9bd564a0cc9f8029f51bef67097d33
- SHA512
  
  a7eb082e62728dbf18778f8d0cb7b746c2a2a005277f58f81540d8ab34ed72384bcc2927db6bec78510d3a23771af14213712adad2e818fa22f6448e7f50aa38
- SSDEEP
  
  3072:RVJlz8zb9QyxIkXtzZ5oiggDYQxiPbNKT:RVJxqb9XDt59DwPbYT
Score

3^/10
behavioral3 behavioral4
- Target
  
  $APPDATA/seemao/config/Seemao_blank.html
- Size
  
  7KB
- MD5
  
  8af864c7116d77ad668ea8b370a6262d
- SHA1
  
  e03249924296ba60b7959c205f4952b9361fb7f4
- SHA256
  
  a026e139bfbbafa2781ee152b889095e29db9ceded0fdcc70f26b112d6299cff
- SHA512
  
  b1151c3d93004e4e1796135472a31e378ac7154cedf1cb093c89cf5c3f543daa84552b7fd005664ea275ce0d9efa06445a872aba4195e8385ca170be9896025b
- SSDEEP
  
  96:pI2OkRe20XGknAQIRI9TM2qjFIWYwbOG4FUzJujEw9Vzw5Q7F/b9:pI25f0X3AQIRI9TbHo4TEwPw5Q7F/b9
Score

1^/10
behavioral5 behavioral6
- Target
  
  $APPDATA/seemao/config/blank.html
- Size
  
  8KB
- MD5
  
  513ebdf12e2177e6542217ab03525223
- SHA1
  
  1d104c7be69390da9cf2080dbcc04ba1e6992b8c
- SHA256
  
  558d6027fb5afd5dfd4188b7cf74499f980331ae888a73b39d6790f83115619d
- SHA512
  
  b37f9f598f12699dd19abadf6ebffa53f9561cee358fe6e77bcb797cbed60609064231627384646025b87a946456a1024feaf153a111b07d4fdbe54f281e5219
- SSDEEP
  
  192:pI22Qq8LneLC4c/f6234LiBPdlduM6m+qHVRWLbgbaEKwwI8o:pIC34LiBFjJ6eHVRWLbgbafwh8o
Score

1^/10
behavioral7 behavioral8
- Target
  
  $APPDATA/seemao/config/map/index.html.html
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

1^/10
behavioral10 behavioral9
- Target
  
  $APPDATA/seemao/config/map/www.360buy.com.html
- Size
  
  2B
- MD5
  
  9b35dd1fd8fb2e8ba4a972122aca50b4
- SHA1
  
  3e7f8dfde6fdfbe8ac9722e701cef405a9236330
- SHA256
  
  eef2eae2699d81c58d176a9a58d4bf183df2acb6844b9eebf1cc60ae460ec50d
- SHA512
  
  dc7fb0400a439e7de8f851e28c48951459483089398ce3be6596f0abb8545f27b0b35eb901e9a3ccb7177e70fbb19276d4f885258089e8b4ddfa2e10facc3c1d
Score

1^/10
behavioral11 behavioral12
- Target
  
  $APPDATA/seemao/config/map/www.3dbuy.com.cn.html
- Size
  
  1B
- MD5
  
  c9f0f895fb98ab9159f51fd0297e236d
- SHA1
  
  fe5dbbcea5ce7e2988b8c69bcfdfde8904aabc1f
- SHA256
  
  2c624232cdd221771294dfbb310aca000a0df6ac8b66b696d90ef06fdefb64a3
- SHA512
  
  bc23b8b01772d2dd67efb8fe1a5e6bd0f44b97c36101be6cc09f253b53e68d67a22e4643068dfd1341980134ea57570acf65e306e4d96cef4d560384894c88a4
Score

1^/10
behavioral13 behavioral14
- Target
  
  $APPDATA/seemao/config/map/www.7cv.com.html
- Size
  
  2B
- MD5
  
  54cafa3a6d69c189cf2df3978fbdd435
- SHA1
  
  ab34955f0a30619fc4faa49013902031d85ddc46
- SHA256
  
  e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- SHA512
  
  43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
Score

1^/10
behavioral15 behavioral16
- Target
  
  $APPDATA/seemao/config/map/www.99kaoshi.com.html
- Size
  
  1B
- MD5
  
  c81e728d9d4c2f636f067f89cc14862c
- SHA1
  
  da4b9237bacccdf19c0760cab7aec4a8359010b0
- SHA256
  
  d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
- SHA512
  
  40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
Score

1^/10
behavioral17 behavioral18
- Target
  
  $APPDATA/seemao/config/map/www.99read.com.html
- Size
  
  2B
- MD5
  
  54cafa3a6d69c189cf2df3978fbdd435
- SHA1
  
  ab34955f0a30619fc4faa49013902031d85ddc46
- SHA256
  
  e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- SHA512
  
  43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
Score

1^/10
behavioral19 behavioral20
- Target
  
  $APPDATA/seemao/config/map/www.amazon.cn.html
- Size
  
  3B
- MD5
  
  9e73f8411a70e1bceefc15ac312a362b
- SHA1
  
  21c4340e3a66a7bc00e5805bc1ebe30d3f2e218e
- SHA256
  
  c69684c471706da34b39b2994be39294926dc543e51aea5f4ce0f06091a00ebd
- SHA512
  
  59bb8b649fad3c2c990881eeb177ca0a751eb64b57b111da5300e5025753c9f642297d8c71b0b9ac0712f33af31a853d6174c1648f56ccadc66cf23e4130f538
Score

1^/10
behavioral21 behavioral22
- Target
  
  $APPDATA/seemao/config/map/www.bgccbook.com.html
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

1^/10
behavioral23 behavioral24
- Target
  
  $APPDATA/seemao/config/map/www.china-pub.com.html
- Size
  
  3B
- MD5
  
  37705de0752d1027f8fc3b3f390c448d
- SHA1
  
  b9a36fe59d4092c1e8363b6dbb80c4325170ebb9
- SHA256
  
  b8d52dc3f650996a66e32d4fd4f40129f6d5f742a20893615fe1b8dbedac6039
- SHA512
  
  affe90e227dd7fed7ac0d9dfcd7a01dda8d7abb454e23a4d98fd7c1c4f8f38bcc7f6062cb52cbca3ac7088ee55900a5b85810e2d258b6896528d8cac87dd4709
Score

1^/10
behavioral25 behavioral26
- Target
  
  $APPDATA/seemao/config/map/www.dangdang.com.html
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

1^/10
behavioral27 behavioral28
- Target
  
  $APPDATA/seemao/config/map/www.dazhe.cn.html
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

1^/10
behavioral29 behavioral30
- Target
  
  $APPDATA/seemao/config/map/www.huachu.com.cn.html
- Size
  
  2B
- MD5
  
  54cafa3a6d69c189cf2df3978fbdd435
- SHA1
  
  ab34955f0a30619fc4faa49013902031d85ddc46
- SHA256
  
  e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- SHA512
  
  43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32