fc096c55e733a3ff75b2b2edb9f4836a02866fb1e52bb8d8d7e284654660192a

Sharing

Copy URL

Twitter E-mail

General

Target

60c374157c753a187e4071d476a99c54_JaffaCakes118
Size

793KB
Sample

240721-v3sybawgnh
MD5

60c374157c753a187e4071d476a99c54
SHA1

6898ea047edaccee69fc614360d73792e9f84d48
SHA256

fc096c55e733a3ff75b2b2edb9f4836a02866fb1e52bb8d8d7e284654660192a
SHA512

21c58236e411e90f0f54e067f2b2fe42b1721a48084d8e247da07c86bab7da5282bcf3c456fa59cbd3edc73185240331147e7cafb67b11305b4d5d54665232c8
SSDEEP

12288:KN4brFaxyh5B8hDQmuvODzqfzU6wVd82w68URx68qd8xsn7XLlJwoCCR8B99jE9r:KaFiyfBgDTDO4/vzS8qyxsFJw1CccB

Score

7^/10

execution upx

Malware Config

Targets

- Target
  
  60c374157c753a187e4071d476a99c54_JaffaCakes118
- Size
  
  793KB
- MD5
  
  60c374157c753a187e4071d476a99c54
- SHA1
  
  6898ea047edaccee69fc614360d73792e9f84d48
- SHA256
  
  fc096c55e733a3ff75b2b2edb9f4836a02866fb1e52bb8d8d7e284654660192a
- SHA512
  
  21c58236e411e90f0f54e067f2b2fe42b1721a48084d8e247da07c86bab7da5282bcf3c456fa59cbd3edc73185240331147e7cafb67b11305b4d5d54665232c8
- SSDEEP
  
  12288:KN4brFaxyh5B8hDQmuvODzqfzU6wVd82w68URx68qd8xsn7XLlJwoCCR8B99jE9r:KaFiyfBgDTDO4/vzS8qyxsFJw1CccB
Score

7^/10

upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/ButtonEvent.dll
- Size
  
  4KB
- MD5
  
  fad9d09fc0267e8513b8628e767b2604
- SHA1
  
  bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA256
  
  5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- SHA512
  
  b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/CustomBrandingURL.dll
- Size
  
  5KB
- MD5
  
  e4c1b74859c17671ffe1c0602fd56b44
- SHA1
  
  15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1
- SHA256
  
  2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156
- SHA512
  
  9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925
- SSDEEP
  
  48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/CustomNSISdl.dll
- Size
  
  40KB
- MD5
  
  bb81b9946ffc1e50b7a052cd00ac2690
- SHA1
  
  0deb5a4c1effa39d22e89199dbb1e6695246848f
- SHA256
  
  dcee4695192b17a77ca40f63234298fa02326bde2a2a34bab373ac5cc2fc5f48
- SHA512
  
  9c1e9fcac43aa41cf6db56557a7d720db52013b78e048ffa821e608868c2bc97d30aa9087047a5faaaed39655759da0d6fd6097f273c30ce51b0f0963c8a739c
- SSDEEP
  
  384:kBrBOvI88qsfnZsFTyQ0mipmycAC/hZAOT8pA40PIL1lBlE:kBrmB8qsfnZeTyQ0mZ7h26g1d
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/CustomnsWeb.dll
- Size
  
  42KB
- MD5
  
  f705fa42cb1edf73153cfe6bef657387
- SHA1
  
  24462c7b144ecb7778ca7a93b9e1dd62464ea81a
- SHA256
  
  39fefafc4ede6838061b804a44b0416ed4929c3c3ff9e64b1e0956186734094f
- SHA512
  
  d993d37b53b60a009021154e5032965c29789fbb8d7b0907dc0877f36abe5d7456a33a8e3111158ee82fd306d24d3aeabe81be776ca5d2f09b8413ff437aa936
- SSDEEP
  
  384:Rl9jSW3OJO9zbkU3UjVzU2QSvA5q/8Bigip:RHjxOJO95mVzjQCAU/S
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/FloatingProgress.dll
- Size
  
  25KB
- MD5
  
  a5d0a090bd2c768b97ca11380bf4ae56
- SHA1
  
  48355d0470c8351e8ac0c031a025c8cf467de0ef
- SHA256
  
  16fff8d5d3ba32a5c063a12cca6dbabbe80068d023383e112079c960ec437b35
- SHA512
  
  d63137eeba8d56a201d1c2f7a5b2caa93dac5da8c9310eebdf2ce389f50668baae3a84d42963857443e0a25ff73abff31291a88f6ef305e86b743c0d27b54292
- SSDEEP
  
  192:4524fcob73yFDoUjSFWbY3Lf+25meJVOuN+Sx10mvmWc4b6bW:45v7Ifc7fV8C+I2mw4b6bW
Score

1^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/GuiInit.lua
- Size
  
  71KB
- MD5
  
  0572ae3c31dd2ed01fb02e2d8331e5bc
- SHA1
  
  32ed49f229ee8a40d51574817d71ebcc8850d4d0
- SHA256
  
  36b01a31d211feaf1af692177961a1da43796896a7f7cfc7cfb41067b6eb056d
- SHA512
  
  60ee3ab50917258406e12fa66296e41bb0feb6f72e3846bc6064c91918c4eba5f5c9a5f350fd0b81d77bed7e44c71c2cd90d63ca3a1ae329867efc5e20ba888a
- SSDEEP
  
  768:AyEpUxaHpHIqRS60guu2IsIsEqPi/bmT/MHkkR/v63b+9+LshpoMLSop5gTho5Q4:azRkgu4BR5mTD3b+vo0Bp5+S5l
Score

3^/10

execution
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/IntegratedOffer-Pickle.html
- Size
  
  4KB
- MD5
  
  de86492c97e8d6a1fb60760c7a539a25
- SHA1
  
  848a17f2882e46f38164cc23ad7183fe670c5c77
- SHA256
  
  11c73ab6112a853e0930dc971f1fdf1be961a01132e5517c4069c7b31fb31d62
- SHA512
  
  ed3cc509e8935f5a0edcf613de31f6bfaea988368ff9634ca8e2e888937aa2f2c37d97ba33eaa3a61a25882c9ee30a52aff216cb642403eb685dce9bb82daf08
- SSDEEP
  
  48:Z4YnnBZJOnQFFfG9mEDe9DR9vAyB/CTE5AeApzVLVoBskL7/C023xPb:HJOnQ3ewEe39v9dyE5jSzZCBsk4
Score

1^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/LuaBridge.dll
- Size
  
  12KB
- MD5
  
  9781b7bb06ea11ebce5dc9d57b3437a3
- SHA1
  
  604123977fffadebfefccae08df6b8e2e5dbab82
- SHA256
  
  c26d867114a04c677ef9ac35d83c2d362c1fb9ff8d46abfb785d71a48cb9c309
- SHA512
  
  666125abfb144665506e1085793656f31708211b940efca8188a5b20d57a058dcae10ec274a7614450f7b66854c9239c2838e61b3721c10482710a2008b681d7
- SSDEEP
  
  192:P4OMsEUVhX/Lk4qmpG1KN8v5Qu1Pbt91TVwxlXMmt9bwg6os4Ian:gJs1bvLbpYaYFPRKl8HgPIa
Score

3^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/LuaSocket/lua/ltn12.lua
- Size
  
  8KB
- MD5
  
  e440044afe6c761507a996b5b45ab0f9
- SHA1
  
  ef772c758fd5d6098b41375f35ac26f3963cc306
- SHA256
  
  b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
- SHA512
  
  8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
- SSDEEP
  
  192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
Score

3^/10

execution
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/LuaSocket/lua/mime.lua
- Size
  
  2KB
- MD5
  
  4bfdaaab9014fe129bc6388fd5687c8f
- SHA1
  
  2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
- SHA256
  
  e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
- SHA512
  
  3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket.lua
- Size
  
  4KB
- MD5
  
  74dbe1060e91112e1c21ef9870b4a587
- SHA1
  
  86afb6aecb0a8387ffa5dead1cc9808332f94310
- SHA256
  
  15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
- SHA512
  
  73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
- SSDEEP
  
  96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
- Size
  
  9KB
- MD5
  
  4f83a72dc82a78cad6eb7edbe7d2f152
- SHA1
  
  486dd564c3b2ac467e3eabfad806308f14fabb5f
- SHA256
  
  26167d7c0f511cca7691ca5ad6ebf85b4427b94ef12e110ba1da75f023db8acd
- SHA512
  
  a5ca1c8955a450a727950d91b720895db55f425f2531bc2d2d17034363961ed52b6cc086289f966ac3c27b056452ab5126ec7d9bb34cf5a92fdf0f725f40781d
- SSDEEP
  
  192:GsooRaLonJfMxBs6gZO2zMAcTcGZqx6iOaBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7iOaBRkfYtppO
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/http.lua
- Size
  
  12KB
- MD5
  
  7bd12178adca19b584ed1320fdae1e81
- SHA1
  
  839753d73984bda68047585bbc36f9344f51c34d
- SHA256
  
  d10fbef2fe8aa983fc6950772c6bec4dc4f909f24ab64732c14b3e5f3318700c
- SHA512
  
  634428c0e7dc62e7c44f60586c0ab0cedb8b55d9e7f2432f7f681aa58e0a8a444168d104d25c51b7839c06817f83f52a7baa4a0e45df6db283d6d5aa0d5e424e
- SSDEEP
  
  384:x7/thyc+f7zLajrZhVoaOt2yyViz/vcvwkD:F/thyc+f7zyoaOt2yqiz/avD
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
- Size
  
  3KB
- MD5
  
  2cad406e591cade482c7f16f39c21481
- SHA1
  
  84a3ab88ff7a9102c2c6d21bdb6eede6862167a4
- SHA256
  
  343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269
- SHA512
  
  ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145
Score

3^/10

execution
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/LuaSocket/mime/core.dll
- Size
  
  52KB
- MD5
  
  4a4845ba1666907f708c9c10a31ec227
- SHA1
  
  1ebf626adc84147e5114885ce779f92d6eb68f3a
- SHA256
  
  a1ffee9687ab4a23a78b3251888aff09e2896d76f8d16d713367b265f125188d
- SHA512
  
  d009f5e2a2ecfbec5e5e788ade142d612846d0c99921774e4a11b060998dfb0680cf1e1a54604535d5560738093f9ae166866cb23eee5c7d9c4e5cc5a33e7464
- SSDEEP
  
  768:Hk1jtHTV0IuugoXCodH5LjciB9snJ1hTgZNno42L:HkhtHTeroXR3aL0toV
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32