71a8af0c356365ac8db8ddf4fc029dd6d2c3db7d929182d11b2be6b49a42898c

Sharing

Copy URL

Twitter E-mail

General

Target

543396a853b94db6f8cbfd730b9476da_JaffaCakes118
Size

1.6MB
Sample

240717-wwq1tasfpk
MD5

543396a853b94db6f8cbfd730b9476da
SHA1

7867232877839888a22c409037cc0e3d5dba772d
SHA256

71a8af0c356365ac8db8ddf4fc029dd6d2c3db7d929182d11b2be6b49a42898c
SHA512

2835e95431b101f621f4182406acb9ccc397f28c36278da3ac274b39d19f58e3b047b467c3a09771f0d7384cba0c1000a8c8fff12da9ff7de70778cfd8010429
SSDEEP

49152:Ju+UdiNdb83dWvUvCdpZUw248b0uRqZeA5yfUF:Ju+UdobkdVOpZDN894YZf4

Score

3^/10

execution

Malware Config

Targets

- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/cache/html/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral1 behavioral2
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/cache/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral3 behavioral4
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/cache/php/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral5 behavioral6
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/images/articles/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral7 behavioral8
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/images/dtree/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral10 behavioral9
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/images/events/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral11 behavioral12
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/images/flags/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral13 behavioral14
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/images/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral15 behavioral16
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/images/logos/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral17 behavioral18
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/images/newslt_issues/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral19 behavioral20
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/images/pictures/index.html
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

1^/10
behavioral21 behavioral22
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/includes/cache.php
- Size
  
  15KB
- MD5
  
  f12db79623e1839b02b6a43c1d149828
- SHA1
  
  163b97940f6b45592341671814da3f64ed7056e7
- SHA256
  
  7b3002aba2ee6ea8dc89ce7a99ed07142800834746a0c6c9d0a0b6490f0052b5
- SHA512
  
  6a892863e4454da0e7e7db447a3e94d206481e2945c06bfbc0c7e22a27b361c31a221e2bf7a0273257466f7fccdb71da9167f7d9ada2400eed15a82daa0768cc
- SSDEEP
  
  192:zztTXd2IcJ9lpRDVR23Rfl2l0n/3xoXoRnkXwn9iF+3f/HinWOWeAOi:XSIcrg3RNcXSswn9iuHB
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/includes/convert_charset.php
- Size
  
  21KB
- MD5
  
  ebd05c36a3dbc1792cf44204c59ceccc
- SHA1
  
  d2227a172850f44c39d8d14fa660caad90a8bdf3
- SHA256
  
  96c2d2ef68db6617c18e40429c6309e7f077dad9765f296e6439db8effe96761
- SHA512
  
  2098653fdbe46d887a43ccae48e030acdc2025320294d784d7deb57b9c9c79e18e4b3d302d4aba3c09b3d7e11e7248ba1ea18535cbea9ef4c35cf948cfb3ade9
- SSDEEP
  
  384:ywOzFC20/fgb3nZLvYrqG7OY8WEYXLFlPP72VDo7CrJ:mpnZbYb7OY8WEYXRlb2m7C1
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/includes/debug.php
- Size
  
  489B
- MD5
  
  2acba8d25551fe77ce7aeff40ade71ba
- SHA1
  
  cba8db39997be462270888435408572bb0795f59
- SHA256
  
  6305a99de4bac610ed027021fe08eb06c359dc40938b2ac1f03317d7d39ad6e7
- SHA512
  
  d133ce95386d46514def87e65dde6a0d9832b799205e7f2983ff2a81c9f33ae7539c15753d8453b5e58392f95af470b40f904b525e6c5bb2be29fce25184e162
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/includes/functions.php
- Size
  
  14KB
- MD5
  
  d1afb473b3f0e7260aa77a3d6ab4ba0f
- SHA1
  
  a48fef3ec8417df1e11e58cb96ad9894f394f7a5
- SHA256
  
  3e5b666261835addcf6bc44d582d3302695a6069cd6e499ab3554629318b32fa
- SHA512
  
  ae23cdccb3aeec8f9790dde210f8ec0cf2c2f7f3866ffec68f51d2a66d9ab0c669850558fd62fa17538fb39290b2aa5454c2c84c82fcc59857ed10faa0609167
- SSDEEP
  
  96:Z0AGaa7pvgZg6RLLgB3OAAn7xMzJ0LC1UywFC5c9:2nsg6tkB3OAA7xM9R1XwFu4
Score

3^/10

execution
behavioral29 behavioral30
- Target
  
  SoSo.News.Express.Pro.2.0.4.PHP.NULL/Upload/includes/functions_home.php
- Size
  
  6KB
- MD5
  
  4b59781e43db7438804a5e26afdac2ca
- SHA1
  
  1ea60627cf976cc2cc873cede9de9241c46f2f99
- SHA256
  
  4b3241a538af044f0a3ec825bffaca5a3e3ecdfcdb71f7ffd2ef22d1a5da27af
- SHA512
  
  c2fc4c67c846e775cb658e065b03a580756bddb71f143ffc563d37bc37909117cccb3a7b243f0a1f0986bc2ccbf3c70686a2eb1c75ea59d7f818c88e0a847ac7
- SSDEEP
  
  192:zvZNhJ5mUzmRciJdGnhkoE+mwc04t8Hgd2RKQAs:zLb51zViJdiSHz3zs
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32