e4a5c5a3d32c1d19ea0da2f3f789ec2e3ab471c7456366220ef219bf1ffc42b7

Sharing

Copy URL Twitter E-mail

General

Target
5c4736651f0c7a735b0086f17d921d06_JaffaCakes118
Size 253KB
Sample240719-rhn7vaydkd
SHA256 e4a5c5a3d32c1d19ea0da2f3f789ec2e3ab471c7456366220ef219bf1ffc42b7
MD5 5c4736651f0c7a735b0086f17d921d06
SHA1 a384ac7fd290d4b476c82bd766695a0fc70b9db8
SHA512 31327c79477565d728e732eb1d7c77f48df11c2598ffce33dc1eb8ca116cdfbc351148edcf63c4c771134621acf66eaca2bf36d0d249d68fa38df5961564d1ad
SSDEEP 6144:je34aDr9U9uW6jmtWUeXWkNq6TLA+dcs2Ty5QFGkio:83QuhcW9hrTcs2EcGLo
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Targets

- Target
  5c4736651f0c7a735b0086f17d921d06_JaffaCakes118
- Size 253KB
- SHA256 e4a5c5a3d32c1d19ea0da2f3f789ec2e3ab471c7456366220ef219bf1ffc42b7
- MD5 5c4736651f0c7a735b0086f17d921d06
- SHA1 a384ac7fd290d4b476c82bd766695a0fc70b9db8
- SHA512 31327c79477565d728e732eb1d7c77f48df11c2598ffce33dc1eb8ca116cdfbc351148edcf63c4c771134621acf66eaca2bf36d0d249d68fa38df5961564d1ad
- SSDEEP 6144:je34aDr9U9uW6jmtWUeXWkNq6TLA+dcs2Ty5QFGkio:83QuhcW9hrTcs2EcGLo
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AnimGif.dll
- Size 9KB
- SHA256 8fb060b77728fbe347e294d1174a732db7cf9c99b187f8f332662c87683fd0a3
- MD5 200b6570553d00a76de8a5a6c9587f07
- SHA1 08ca76a84cba8483ab34285d07909e08bdbf4a67
- SHA512 01ab8aa80d7d5d3083f2e3016aab5dad29c0bbba18b225a5dde51b3bc6fa4c8c1278aec17d76bc5ee2b9ccb8532c22d79845162f752bba6ee12341b4d64304e8
- SSDEEP 192:gOHvLYKKad68vn0YQRbqLGWSMRH00yQTbxDdHw:bvLXKa0OqRqS1MRH00HJdH
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- MD5 SHA1 SHA512
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/ExecDos.dll
- Size 5KB
- SHA256 d387b725afbd2a6f9b44999278d21025fae55b391e45f7751b88dfb13511a993
- MD5 ebcf9f71d804abab3c2e5ce4c17dc22e
- SHA1 17d13084e75cbfa5fbfdd0025e9a0ee5772ae765
- SHA512 5576396c2d885c039668d7f401eeee583eb4de39e8497c3aaec32d47f4417a522fe6786c111d50a5fba7570f50e84144ef3a8aea42677d170e79114343c3a4a1
- SSDEEP 48:qNpugCjmWaZ+rnHAUiP9JLw/RHFtly5vorpSpSi7+5HCAx31Oglt6Zlrz9QH96AD:r0W1nHAfPPORHnooAU3xYglt6WwE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
- MD5 e541458cfe66ef95ffbea40eaaa07289
- SHA1 caec1233f841ee72004231a3027b13cdeb13274c
- SHA512 0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
- SSDEEP 384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsArray.dll
- Size 6KB
- SHA256 48941e9f5c92a33f1e60a7a844d562dd77ce736fd31b5503c980b49679dfe85e
- MD5 f8462e9d1d7fd39789afca89ab6d6046
- SHA1 7e9a518e15b7490245d2bef11a73f209c8d8d59b
- SHA512 57dee2253abd7d17d53811d5e95237f9434288518fb043645524a517786db2d8a91df86a6da732c620f12ad0e7ea30a923b8d5f3de386c65bd3ff240bc0dff69
- SSDEEP 96:TjGBPJ762z6gjutipI+h7jz5ozZt/aYfA7EfXxLfAZi:/ix7ibUpIS+Xa1wX2Zi
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
- MD5 acc2b699edfea5bf5aae45aba3a41e96
- SHA1 d2accf4d494e43ceb2cff69abe4dd17147d29cc2
- SHA512 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
- SSDEEP 96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsWeb.dll
- Size 8KB
- SHA256 7d4da7469d00e98f863b78caece3f2b753e26d7ce0ca9916c0802c35d7d22bcf
- MD5 84bcf3c71e70d5a6e9dc07d70466bdc3
- SHA1 31603a1afc2d767a3392d363ff61533beaa25359
- SHA512 61aefa3c22d2f66053f568a4cc3a5fc1cf9deb514213b550e5182edcecd88fadf0cb78e7a593e6d4b7261ed1238e7693f1d38170c84a68baf4943c3b9584d48e
- SSDEEP 96:9E1ZgHfHizBkiz1zCuNrwXTP8Jx/N6SCMeNV37bnwXwPML/bUdut5tCsPb2N6nOc:9E1ZkGdbiSCMeNN7LwAY/gd+Oc
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral19 behavioral20
- Target
  $TEMP/instloffer.exe
- Size 63KB
- SHA256 be5c9c9a9eab047089059fadb21c8cbaf0510e542adebc90af693733dcc27885
- MD5 7b8429a8226fcbcf83e70cb4f958b57e
- SHA1 f7a5814767cdd0caa82274af6d66ce6ceff9c3ae
- SHA512 4b1369dd4465ff572f99e961a495516a9839bcc1c3921af7c253bca1f41f45abdfd149e56b789bdf5e1786a1351864e9b7f3e8d1788e41e765b95cd5c63c736c
- SSDEEP 1536:jddZEszWriITJGrvopX1VF7CXjl7yNp7hPRSEvrGqEYip:jOszWOITsEL50jl7yT7h5SEvrGqEdp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  $TEMP/license.rtf
- Size 15KB
- SHA256 b64310f29eeaf0f12c84c015b76af682a1904a4e25a9dcf3619a579d1315dca7
- MD5 a68888617e49a38ecdc9d37d4ad4bb0f
- SHA1 8ead5f3a07309bd43d4a7d3050816daa3eb794ba
- SHA512 f8120ba06f7fa6c3f6e9e56be21d80deec2e8563fdebb168f9fa16cfe36cbdf84d78d5f750056b82bc6e9653104840f58a6e56cf69e25c60bd8fb64a64d3117f
- SSDEEP 192:doyiN7vCHjJnNCN2N6Sc9wnsmjeA9WxAWRVEzSEfcrYEQxTHzridjlpNoj6RVIQj:OyU4CUoensmmxau0HCxpM6R+QDVsMx
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

ACProtect 1.3x - 1.4x DLL software

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24