220bb8b59e308e6334c10d5707b79ccc2a32e6fd5c6c51f54a3c4124d85ddf6a

Sharing

Copy URL

Twitter E-mail

General

Target

5f78e29fb554ea56c78f6ca2479c52be_JaffaCakes118
Size

6.2MB
Sample

240720-hsmx4a1fjk
MD5

5f78e29fb554ea56c78f6ca2479c52be
SHA1

d584d4c95d7ad405ecf27808c7c03ac06206d709
SHA256

220bb8b59e308e6334c10d5707b79ccc2a32e6fd5c6c51f54a3c4124d85ddf6a
SHA512

2616ee7ed1d1f11ef209e8aedcdc1661d4463489fe46206b0d851b18525229d36eea8d0304438319c0d308edaf953c6d19f41f9cc236cbf9e8f15e3ed21f45c9
SSDEEP

196608:C7U7Gq1lax5hnTL+igb+Lvg3v0IHt6hDZltAO3LK3O:C7U7ncTBLw02EZlt3LgO

Score

7^/10

Malware Config

Targets

- Target
  
  5f78e29fb554ea56c78f6ca2479c52be_JaffaCakes118
- Size
  
  6.2MB
- MD5
  
  5f78e29fb554ea56c78f6ca2479c52be
- SHA1
  
  d584d4c95d7ad405ecf27808c7c03ac06206d709
- SHA256
  
  220bb8b59e308e6334c10d5707b79ccc2a32e6fd5c6c51f54a3c4124d85ddf6a
- SHA512
  
  2616ee7ed1d1f11ef209e8aedcdc1661d4463489fe46206b0d851b18525229d36eea8d0304438319c0d308edaf953c6d19f41f9cc236cbf9e8f15e3ed21f45c9
- SSDEEP
  
  196608:C7U7Gq1lax5hnTL+igb+Lvg3v0IHt6hDZltAO3LK3O:C7U7ncTBLw02EZlt3LgO
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/ExecCmd.dll
- Size
  
  4KB
- MD5
  
  b9380b0bea8854fd9f93cc1fda0dfeac
- SHA1
  
  edb8d58074e098f7b5f0d158abedc7fc53638618
- SHA256
  
  1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
- SHA512
  
  45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
- SSDEEP
  
  48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/InetLoad.dll
- Size
  
  18KB
- MD5
  
  994669c5737b25c26642c94180e92fa2
- SHA1
  
  d8a1836914a446b0e06881ce1be8631554adafde
- SHA256
  
  bf01a1f272e0daf82df3407690b646e0ff6b2c562e36e47cf177eda71ccb6f6c
- SHA512
  
  d0ab7ca7f890ef9e59015c33e6b400a0a4d1ce0d24599537e09e845f4b953e3ecd44bf3e3cbe584f57c2948743e689ed67d2d40e6caf923bd630886e89c38563
- SSDEEP
  
  384:nUOPTbiJmdztwwKq8W1cyMjPzV0Ac9k+LMkIX1+Gn+XHdjf:nTikliwKq8W1rMjPzz+f
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  325b008aec81e5aaa57096f05d4212b5
- SHA1
  
  27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA256
  
  c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- SHA512
  
  18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP
  
  192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  32KB
- MD5
  
  83142eac84475f4ca889c73f10d9c179
- SHA1
  
  dbe43c0de8ef881466bd74861b2e5b17598b5ce8
- SHA256
  
  ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
- SHA512
  
  1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
- SSDEEP
  
  384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/LangDLL.dll
- Size
  
  5KB
- MD5
  
  9384f4007c492d4fa040924f31c00166
- SHA1
  
  aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA256
  
  60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- SHA512
  
  68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP
  
  48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  c10e04dd4ad4277d5adc951bb331c777
- SHA1
  
  b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA256
  
  e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- SHA512
  
  853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP
  
  96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/xml.dll
- Size
  
  118KB
- MD5
  
  42df1fbaa87567adf2b4050805a1a545
- SHA1
  
  b892a6efbb39b7144248e0c0d79e53da474a9373
- SHA256
  
  e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845
- SHA512
  
  4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d
- SSDEEP
  
  1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK
Score

3^/10
behavioral17 behavioral18
- Target
  
  $TEMP/bing_inst.exe
- Size
  
  727KB
- MD5
  
  ee57067494d77b0aa256f1745ab21d8c
- SHA1
  
  07d94690bc012c8e3398438a2798c9a70c9523a8
- SHA256
  
  63fad2c9de445b52f3e083064f22bc9ac5130232b975b605de4b47eea9d3b318
- SHA512
  
  3b4f121a3df14337551a25b1b917e069733a6e7693ac1939e7ac4989487dd82cb5a9add2598646ae1ae2ad825d71d444d733f8268e7fd4e8238d8340ab3c5950
- SSDEEP
  
  12288:eagtS59jDaBrLAnGpSzltMXNlNwSxlnoP189Bh86+u1+4kS12cVFf:eagtSXDtGgzltGlnoPWCQ+Vs
Score

1^/10
behavioral19 behavioral20
- Target
  
  $TEMP/somoto.exe
- Size
  
  97KB
- MD5
  
  eceee69fc6c00a8cd3f28d2099dab1a3
- SHA1
  
  a6d7a59e52a3fb0769a047425496210846797ebf
- SHA256
  
  9eafc5e4fc361ee89eb2861b97b816e6cc2b51fbad4003a923f2c16fc5198905
- SHA512
  
  2f777e66d3a8480276845192b6dd8b3d7c2d7bbbfc8ec51255dbbfbc06c6168e62c35c5934b5646eb6f1f697f3e6b9c49933107aa70e3322e0990b41cbb6d26a
- SSDEEP
  
  1536:jQpQ5EP0ijnRTXJPIZZZTLRybHJ3ac+5PxwOUEto61ThBBdb3D6pYlFbV:jQIURTXJE0p3YAODS6RhBHDIY9
Score

7^/10
- Loads dropped DLL
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/Banner.dll
- Size
  
  4KB
- MD5
  
  0116a50101c4107a138a588d1e46fca5
- SHA1
  
  b781dce23e828cf2b97306661c7dad250a6aaf77
- SHA256
  
  ab80cf45070d936f0745f5e39b22e6e07ba90aa179b5ec4469ef6e2cb1b9ef6b
- SHA512
  
  55de6aeaad05b01a25828553d3ea9f1b32a8b0c35c42dc6106bed244320e3421ec6a6f5359b15f9d18dd1e9692ca5572b2736d9d48cceb07b9443601d00a5988
Score

1^/10
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  14KB
- MD5
  
  a5f8399a743ab7f9c88c645c35b1ebb5
- SHA1
  
  168f3c158913b0367bf79fa413357fbe97018191
- SHA256
  
  dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
- SHA512
  
  824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
- SSDEEP
  
  192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score

3^/10
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/dealbulldog.rtf
- Size
  
  60KB
- MD5
  
  86d815dee4ed827f8d65f7c3e667ea8f
- SHA1
  
  bf59d20b20780b137325eb1f13303d2b6dbcebc0
- SHA256
  
  7411fb4a51d517e1f657b52b0473243bfb4594193f9ea74cd82e1658cda9da12
- SHA512
  
  cfad1960d535439d4d9560635391e4ade80b1afc3344d037fd6a53a2a5d77bd8b9c467ee9c42fcdea662602e2dbf520ab9dcf48a83323be7cf93a2ffe315adf1
- SSDEEP
  
  768:IEGRYm4xhN6DEi3w2EHIDui3w2EHHTuDLXI1n2GzcEYFDN2yLzCGpVM36nC6ZrSs:InROyLOGLM3qTDh
Score

4^/10
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/filebulldog.rtf
- Size
  
  49KB
- MD5
  
  631f2949e010cec263adefaf4ef669ea
- SHA1
  
  7fcbdd13243b97c3fb82d3e4ff919de8e514473c
- SHA256
  
  f9daeeb2bf87842cdcfcca7ac228b827c81f692aa55a43fe9d1eaad24790c067
- SHA512
  
  048b49e62cde89f082318ef9bc63519fd635b1b0384c84de87d7f2327efec78a07a1e3f11763b72092fd53eae8e5d83ade98d61ef319b4a492d597be4f3f98f1
- SSDEEP
  
  384:gNaUnXkFKw0zybd6NgYUlvaH/se494ZZz/m4gnNzhuzY3+lXFL+GK9vi6rGs2AYE:gNqYUlvaH//vDgNzw83jwhAkhe
Score

4^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32