1bbd71e1f0adb50c9656aeb585ba5da54f9bb14fc8a0c868f23960e55dcf6c70

Sharing

Copy URL Twitter E-mail

General

Target
63014ae4d367c93391e652530bb2af5b_JaffaCakes118
Size 238KB
Sample240722-nbv52avaqe
SHA256 1bbd71e1f0adb50c9656aeb585ba5da54f9bb14fc8a0c868f23960e55dcf6c70
MD5 63014ae4d367c93391e652530bb2af5b
SHA1 ac694d68f99d8ea99188ba8157e80f070a270907
SHA512 a9d2a8d155a1f5a91c51537915d4b99e12304fcfd454395f5f2fe82f0502d18507bdbb5157830602d11ed3b0d2ef8601c801ea7a3c2f7c023553b5ae7e75b5c7
SSDEEP 3072:9gXdZt9P6D3XJv4B/N+wEP4HUOZjhatiWiJ6egdeGDFjCI42qwIVmqnvXypDnT8w:9e34WKtfia7dlDFx40e6DT6Dcs2jiS
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

upx

Malware Config

Targets

- Target
  63014ae4d367c93391e652530bb2af5b_JaffaCakes118
- Size 238KB
- SHA256 1bbd71e1f0adb50c9656aeb585ba5da54f9bb14fc8a0c868f23960e55dcf6c70
- MD5 63014ae4d367c93391e652530bb2af5b
- SHA1 ac694d68f99d8ea99188ba8157e80f070a270907
- SHA512 a9d2a8d155a1f5a91c51537915d4b99e12304fcfd454395f5f2fe82f0502d18507bdbb5157830602d11ed3b0d2ef8601c801ea7a3c2f7c023553b5ae7e75b5c7
- SSDEEP 3072:9gXdZt9P6D3XJv4B/N+wEP4HUOZjhatiWiJ6egdeGDFjCI42qwIVmqnvXypDnT8w:9e34WKtfia7dlDFx40e6DT6Dcs2jiS
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AnimGif.dll
- Size 9KB
- SHA256 8fb060b77728fbe347e294d1174a732db7cf9c99b187f8f332662c87683fd0a3
- MD5 200b6570553d00a76de8a5a6c9587f07
- SHA1 08ca76a84cba8483ab34285d07909e08bdbf4a67
- SHA512 01ab8aa80d7d5d3083f2e3016aab5dad29c0bbba18b225a5dde51b3bc6fa4c8c1278aec17d76bc5ee2b9ccb8532c22d79845162f752bba6ee12341b4d64304e8
- SSDEEP 192:gOHvLYKKad68vn0YQRbqLGWSMRH00yQTbxDdHw:bvLXKa0OqRqS1MRH00HJdH
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/BgWorker.dll
- Size 2KB
- SHA256 50f735ab8f3473423e6873d628150bbc0777be7b4f6405247cddf22bb00fb6be
- MD5 33ec04738007e665059cf40bc0f0c22b
- SHA1 4196759a922e333d9b17bda5369f14c33cd5e3bc
- SHA512 2318b01f0c2f2f021a618ca3e6e5c24a94df5d00154766b77160203b8b0a177c8581c7b688ffe69be93a69bc7fd06b8a589844d42447f5060fb4bcf94d8a9aef
- MD5 SHA1 SHA512
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/ExecDos.dll
- Size 5KB
- SHA256 d387b725afbd2a6f9b44999278d21025fae55b391e45f7751b88dfb13511a993
- MD5 ebcf9f71d804abab3c2e5ce4c17dc22e
- SHA1 17d13084e75cbfa5fbfdd0025e9a0ee5772ae765
- SHA512 5576396c2d885c039668d7f401eeee583eb4de39e8497c3aaec32d47f4417a522fe6786c111d50a5fba7570f50e84144ef3a8aea42677d170e79114343c3a4a1
- SSDEEP 48:qNpugCjmWaZ+rnHAUiP9JLw/RHFtly5vorpSpSi7+5HCAx31Oglt6Zlrz9QH96AD:r0W1nHAfPPORHnooAU3xYglt6WwE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420
- MD5 e541458cfe66ef95ffbea40eaaa07289
- SHA1 caec1233f841ee72004231a3027b13cdeb13274c
- SHA512 0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c
- SSDEEP 384:b1JO6XgZkjxm+NpXaWgzxUX//EUhU7ya4LQ0Ac9khYLMkIX0+GBty3Sm0:b+6Xgsm+NpKWgzxUXnEUhUua4Li70
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsArray.dll
- Size 6KB
- SHA256 48941e9f5c92a33f1e60a7a844d562dd77ce736fd31b5503c980b49679dfe85e
- MD5 f8462e9d1d7fd39789afca89ab6d6046
- SHA1 7e9a518e15b7490245d2bef11a73f209c8d8d59b
- SHA512 57dee2253abd7d17d53811d5e95237f9434288518fb043645524a517786db2d8a91df86a6da732c620f12ad0e7ea30a923b8d5f3de386c65bd3ff240bc0dff69
- SSDEEP 96:TjGBPJ762z6gjutipI+h7jz5ozZt/aYfA7EfXxLfAZi:/ix7ibUpIS+Xa1wX2Zi
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- MD5 c10e04dd4ad4277d5adc951bb331c777
- SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
- MD5 acc2b699edfea5bf5aae45aba3a41e96
- SHA1 d2accf4d494e43ceb2cff69abe4dd17147d29cc2
- SHA512 e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
- SSDEEP 96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsWeb.dll
- Size 8KB
- SHA256 7d4da7469d00e98f863b78caece3f2b753e26d7ce0ca9916c0802c35d7d22bcf
- MD5 84bcf3c71e70d5a6e9dc07d70466bdc3
- SHA1 31603a1afc2d767a3392d363ff61533beaa25359
- SHA512 61aefa3c22d2f66053f568a4cc3a5fc1cf9deb514213b550e5182edcecd88fadf0cb78e7a593e6d4b7261ed1238e7693f1d38170c84a68baf4943c3b9584d48e
- SSDEEP 96:9E1ZgHfHizBkiz1zCuNrwXTP8Jx/N6SCMeNV37bnwXwPML/bUdut5tCsPb2N6nOc:9E1ZkGdbiSCMeNN7LwAY/gd+Oc
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral19 behavioral20
- Target
  $TEMP/instloffer.exe
- Size 63KB
- SHA256 364473e09b0d8af87e3b382bc3c8917558cda7be9e27ec06aca1c70c1ffd130c
- MD5 fb9b18511894c93bca0f85ca949bca64
- SHA1 638b081b36460365f61c70daafc4b37e836f407b
- SHA512 0c63dcf2e18686e1add906d572f8ff3b93b756ccc83a38ae048fb1949528ed63d7521fdaee5e21f44209d65ec189f5e4fe68f228a9a91d6186ab2bea64d0f325
- SSDEEP 1536:jldZEszWriITJGrvopX1VF7CXjl7ybqYPRSEvrGqEYii:j2szWOITsEL50jl7yx5SEvrGqEdi
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral21 behavioral22
- Target
  $TEMP/license.rtf
- Size 14KB
- SHA256 2b045f41d80f4e5b316fe8c057b0cbf053c51cec14d818febe18069fe46b0d46
- MD5 3c630709141dbb3bc6f4aa0e2da2d267
- SHA1 5bc7238cdacace891298efd3aadd3f7ea662b8b7
- SHA512 138cea1304c6532daecca9deaba8f1957bfc19ea40238f796bdee5edd1f237998696d0070c8abddeeb01bbf572571263d8c91d949565890b347eed2b50f4a9b0
- SSDEEP 192:a2VSPIiNgdCHjJnymr/AV311uqEd0mm7wadhXf5a:aKSgU4mr/AVyGwiA
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

ACProtect 1.3x - 1.4x DLL software

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24