9f2bf14e31ec6527bf34cd2a14a107dcc70ec333301c5202cc3d11696b39f0ba

Sharing

Copy URL Twitter E-mail

General

Target
5a6f5ade9bc3d1e5d35166fa00b25295_JaffaCakes118
Size 638KB
Sample240719-exbh3ssdlr
SHA256 9f2bf14e31ec6527bf34cd2a14a107dcc70ec333301c5202cc3d11696b39f0ba
MD5 5a6f5ade9bc3d1e5d35166fa00b25295
SHA1 7de5f4c919b0c01c3d4c93a64b9618c5632748a9
SHA512 60a47e31117b8ee1a5a99de121d9e87955a895398e801df6be386965a09e7ab2ec557383745574e0d21e40a73a284ba49bedd049ff1d52dc5d6255e194e422ac
SSDEEP 12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg53op:AtMCkmOMXJbFSv/JivQsG50+FIM
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  5a6f5ade9bc3d1e5d35166fa00b25295_JaffaCakes118
- Size 638KB
- SHA256 9f2bf14e31ec6527bf34cd2a14a107dcc70ec333301c5202cc3d11696b39f0ba
- MD5 5a6f5ade9bc3d1e5d35166fa00b25295
- SHA1 7de5f4c919b0c01c3d4c93a64b9618c5632748a9
- SHA512 60a47e31117b8ee1a5a99de121d9e87955a895398e801df6be386965a09e7ab2ec557383745574e0d21e40a73a284ba49bedd049ff1d52dc5d6255e194e422ac
- SSDEEP 12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg53op:AtMCkmOMXJbFSv/JivQsG50+FIM
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  $APPDATA/Internat Exp1orer.qnk
- Size 1KB
- SHA256 6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- MD5 9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1 39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA512 eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
- MD5 SHA1 SHA512
Score

3^/10
behavioral3 behavioral4
- Target
  $DESKTOP/Internat Exp1orer.qnk
- Size 1KB
- SHA256 6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- MD5 9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1 39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA512 eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
- MD5 SHA1 SHA512
Score

3^/10
behavioral5 behavioral6
- Target
  $DESKTOP/ԱմƷ.qnk
- Size 1KB
- SHA256 23dde6d591dc39c8b7901a49ce2edbe1591ef2b68d69700a4c81fd741f2d714e
- MD5 3801cf5240ef322de5fb53224f763068
- SHA1 e4286f9b6e5986b6a237bc70fdc03e8a36287e11
- SHA512 3d26058c20050e236cb78533485dc2dd02ed6be0ab7037e8eac5916b75abe189d38f57ed45899787cbe69318ec4d6763633d1a8a96600fd0b20b83aaa9f03ef4
- MD5 SHA1 SHA512
Score

3^/10
behavioral7 behavioral8
- Target
  $FAVORITES/Ա.lnk
- Size 1KB
- SHA256 248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- MD5 62d588bdb74e4e2e5d1689fa9272ce39
- SHA1 9d0db515d8f65e57353381d707060f7343a74da7
- SHA512 cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
- MD5 SHA1 SHA512
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0
- MD5 107737e3282fefd85684f2fa3df6d1c3
- SHA1 3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f
- SHA512 439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4
- SSDEEP 192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 49437f4b9fd38007f3b2735f0a8a12830b995305c75118b440202980183d5c6a
- MD5 0ae9c427fe7bbbbf1368c1c6d3933ae7
- SHA1 c8e5131613302531c88512dada29a18886259268
- SHA512 59b76b00f2b0d6242dc5bc3cb36d3ff78867445f502e34cea890c6f493c2adf9b97cec539963204ddd1c641e1a77139f46fc33dec4dc636f4b06d2edffffec6d
- SSDEEP 96:vCCshwlpqUsYghN/9uvZ7CLWNCSiiVTQYBGVXRvuBDlSriklbuba1iLc+cEyzo7e:BzqUuh/uLCXIkYBGV9uVlSblbubbwtl
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral13 behavioral14
- Target
  $SMPROGRAMS/Internat Exp1orer.qnk
- Size 1KB
- SHA256 6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- MD5 9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1 39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA512 eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
- MD5 SHA1 SHA512
Score

3^/10
behavioral15 behavioral16
- Target
  $SMPROGRAMS/Ա.lnk
- Size 1KB
- SHA256 248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- MD5 62d588bdb74e4e2e5d1689fa9272ce39
- SHA1 9d0db515d8f65e57353381d707060f7343a74da7
- SHA512 cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
- MD5 SHA1 SHA512
Score

3^/10
behavioral17 behavioral18
- Target
  $STARTMENU/Internat Exp1orer.qnk
- Size 1KB
- SHA256 6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- MD5 9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1 39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA512 eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
- MD5 SHA1 SHA512
Score

3^/10
behavioral19 behavioral20
- Target
  $STARTMENU/Ա.lnk
- Size 1KB
- SHA256 248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- MD5 62d588bdb74e4e2e5d1689fa9272ce39
- SHA1 9d0db515d8f65e57353381d707060f7343a74da7
- SHA512 cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
- MD5 SHA1 SHA512
Score

3^/10
behavioral21 behavioral22
- Target
  $TEMP/remote.exe
- Size 67KB
- SHA256 235d9e96c68a262c1d6093fa499c8ffc14f41cca8c79dc289bdb27d70b7411d3
- MD5 71c0a16bad347349ea62d30b76bcc326
- SHA1 841087fc28fb4812e0c2898ec8ac9049d3bcf593
- SHA512 7d4ddb4e70d49cc1c221abf68b71f579200adefb1d79fdfd414494b32f11a004aafb3715e8131e382c61277a99abbc374ec7448f176d235bd2da581d71610fc5
- SSDEEP 1536:Mppv5CNE2E/n/fn8lvOvNOH4KJJ6CR4Romu/BsKO+sqCZnAucg8s:Mppv5CNEhf8FH4KJJ6045y5CZ9Is
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral23 behavioral24
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0
- MD5 107737e3282fefd85684f2fa3df6d1c3
- SHA1 3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f
- SHA512 439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4
- SSDEEP 192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral25 behavioral26
- Target
  $PLUGINSDIR/NSISdl.dll
- Size 14KB
- SHA256 f144d17060052ce6205fdf717a647f6b4e20c268fea14e81efc26356d00bbaab
- MD5 01776e92060ac00338d0367e49518384
- SHA1 928f7d41e59a1f9fefadeea6226c5a223ebcd699
- SHA512 2da8cb9c0cb7ff983b137d321f48f5ecf24600c1b52570691ed527531cdb61c98f8b2cf0c53446cb4e7f98d571f8e2591a3f3570ac9722abbac25648866d9881
- SSDEEP 192:SpM3f5sTMzoU7Fs0+/tcDm0tzailQvzwTaoxs+/rH6hqCeHtpflVp6kn2VgsTwp:SpM3xcMzRF4/Gv+H+D6hqbgk2rTwp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral27 behavioral28
- Target
  $TEMP/sobar.exe
- Size 508KB
- SHA256 e51ae0e66644fcf814a818b656d8da099274fb32e7e7bf734232782ecadf4c04
- MD5 35cbcab16f3e3833f6579e49db302b5c
- SHA1 63c123503c583b741607eb7a6d8dd2a7244c6fa4
- SHA512 714c8abe739c58dbe7fad652ef5acd18b25d192f7100ae9aa612e69f5b4f74d5baca940a58ac63de8440b68564a4589ef52fff6e61a2034b48f82914d60190a5
- SSDEEP 12288:S6oCgAXtDbQCh3vtuuDp8SqV2GjMTtzdkw:S/cXtD8Ch3vtu0qQGARp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30