c8a469f3405b3ba62d4251f863e04f810d475aca7e56d2c4db7aff2e1d87b805 | Triage

Sharing

General

Target

77e2d99bcf831936ebe8a259a96b6001_JaffaCakes118
Size

676KB
Sample

240727-mn12daxfqh
MD5

77e2d99bcf831936ebe8a259a96b6001
SHA1

7414cdc96166ecf4144e87d8988c99391f47dd98
SHA256

c8a469f3405b3ba62d4251f863e04f810d475aca7e56d2c4db7aff2e1d87b805
SHA512

a7fb38324fd5d4e583626f6d4e07ead39ec33a12d30d3bfea1aef1fce7ae77925b78f7078d8476df3b11ce74c619e5c40a0034e92f8253c21450d6f1d4cf51c2
SSDEEP

12288:tWS66ADniqwce2BRa5XNyPB0sUVHXe5RG2J6Vln9q6dH4:tWfPwce2cgPB0JVHXe5RsVln0B

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  77e2d99bcf831936ebe8a259a96b6001_JaffaCakes118
- Size
  
  676KB
- MD5
  
  77e2d99bcf831936ebe8a259a96b6001
- SHA1
  
  7414cdc96166ecf4144e87d8988c99391f47dd98
- SHA256
  
  c8a469f3405b3ba62d4251f863e04f810d475aca7e56d2c4db7aff2e1d87b805
- SHA512
  
  a7fb38324fd5d4e583626f6d4e07ead39ec33a12d30d3bfea1aef1fce7ae77925b78f7078d8476df3b11ce74c619e5c40a0034e92f8253c21450d6f1d4cf51c2
- SSDEEP
  
  12288:tWS66ADniqwce2BRa5XNyPB0sUVHXe5RG2J6Vln9q6dH4:tWfPwce2cgPB0JVHXe5RsVln0B
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/DLLWaitForKillProgram.dll
- Size
  
  28KB
- MD5
  
  9c4b8ec42d89f7557bfd90798ce52787
- SHA1
  
  2376dde426ea65aa27c30e304086310605382475
- SHA256
  
  ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
- SHA512
  
  17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
- SSDEEP
  
  96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/DLLWebCount_new.dll
- Size
  
  28KB
- MD5
  
  f16f5feebd9b431a8bc63456c0ad267c
- SHA1
  
  acc75cfa3ed7888334aa2ccf305a6c6c58a08aaf
- SHA256
  
  5417af0fc8284e9745650a55803bb34217e314096dc7cedf113c960624ae08ad
- SHA512
  
  ed1e62d903b511a29abd5def4419b5afa63699ee2d1c91a9d884ffb01d7debe5981559574cac4885140d1f27f4275be56236f5c6f1c327147dcac8893f965512
- SSDEEP
  
  96:3YP18J49uJPeaFX/0gOtJ/9nMjbnbk2Zl1bU6i9vtmAuSBudGaTA:3f1bFX/rOtJ/lMvbfJU6snpYdb
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/IEFunctions.dll
- Size
  
  3KB
- MD5
  
  9701818d39318145dd164794ef3a3846
- SHA1
  
  7db701f8dc19163d46ba88e8b68d8dbf428a8152
- SHA256
  
  3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a
- SHA512
  
  d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  eef9e469e8a30717974499f277d97e2a
- SHA1
  
  2d33c25984ebd9116beeb55cdde4c5c86c023e5d
- SHA256
  
  1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
- SHA512
  
  d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
- SSDEEP
  
  192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  36KB
- MD5
  
  6958016193a066833556992077bad4fe
- SHA1
  
  5f564945936f99381d7e2408f034f97d069005a4
- SHA256
  
  f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
- SHA512
  
  fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
- SSDEEP
  
  384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/SelfDelete.dll
- Size
  
  24KB
- MD5
  
  7bf1bd7661385621c7908e36958f582e
- SHA1
  
  43242d7731c097e95fb96753c8262609ff929410
- SHA256
  
  c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e
- SHA512
  
  8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f
- SSDEEP
  
  96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/processes_second.dll
- Size
  
  140KB
- MD5
  
  f0a1eae66dd2f54fbe26c26db5493a6f
- SHA1
  
  46d56b4c6694da1ec4d88b0a5b153dad02b5dca7
- SHA256
  
  8fe4dad8f894bcdb9a83a9d302907de404695be4b50e619afd88f09d72583e69
- SHA512
  
  e1b3c946e90fc30b6cdf953c8c7e96121b462bf8529099e0587f7f243b9d73eeba52b510dd2598937f188f7a35bc1e3785b7589ec6c249996a5795c10dafd1e7
- SSDEEP
  
  3072:F+WSoWifAbFBgChOQcNg3kirQDNgv3gp9Ibzls8:iAAbFBgChOzNgUrDNgvgp
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/stack.dll
- Size
  
  10KB
- MD5
  
  0f61a81a543822de5fcb9a8a43f230dd
- SHA1
  
  d01d4a0f542f3c654637fdfe5a574fe1f150ece1
- SHA256
  
  46b4a72ae8590b0afb3304cc5c13db0502bc4c4cb02f64f37c79008c17db814f
- SHA512
  
  596b7a897ba64c32e26ba6168aa3628aad37b187a9814a286298307d8c42eabf8e8a679dbda558f8b2cdc8676c94ec819256432aa5ad7c05a5387759262a4402
- SSDEEP
  
  192:VBEc/BwQV5gTRk6uIu8uQubQuNu3fufuXuPDyuSuFujournu6udkuUuw0y9UrVo:VBEwBZmx97TSefeC/zIqoInvEkJ8y9x
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  RClean.exe
- Size
  
  912KB
- MD5
  
  2e33d66b46ac8306bc0c46099bd2fadc
- SHA1
  
  ad7d0c2672fe97b46257064807c299d6f191f6f8
- SHA256
  
  25684c602025ff00c5c81d3f87eceaf9bff908fca3d548ea68f68efebecd935c
- SHA512
  
  6eef26f7bd84d080bdcfd47c48df30d0aac4469e215a4bae0ea02a3a77747d198427116a87427d3063e667a495e583468effd62f4e50c695b7a2c597964f605d
- SSDEEP
  
  12288:DMok+4vzOfz2/avK5mq1c9xHImNvF3PUf+LiVdum5nl3PxAhHyppJdsQdW//EO8K:Kxqfz2/ai5mq1EomNvFqbPT
Score

6^/10

discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral19 behavioral20
- Target
  
  RCleanT.exe
- Size
  
  212KB
- MD5
  
  36528e21bf54bdc6ae0984b64564fe78
- SHA1
  
  d16f64665cd14e94f65c600323aded6d8f6af8c3
- SHA256
  
  ae5cc49ee175ad01f9a3e88bbae40bed36db1d6c1a29f60df5ec2905205fa30f
- SHA512
  
  c1ec229d41da11a6e5be82924642d86555fd81e7e1a5b4955e6e9468c06859ae8a666d884625f18c7ee69c9ab22bd16ac28c757d0db0e00591ad4a2cd1ff0f02
- SSDEEP
  
  1536:OqxuvsXVZcp74Q2KgULP960Vs/oazNvli:OqxtVZcWQLJ960Vda9
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  Uninstall.exe
- Size
  
  88KB
- MD5
  
  2d06f4000af9632594d69f771b24cc99
- SHA1
  
  dceaddf53206b8168386971ea0c0e2d3dfa1a4a7
- SHA256
  
  b89c51188eaabe830f78c8ae021f50b4a2962360d7bdd260e9b967ad91945dd0
- SHA512
  
  3c451cc8f72303920097235c5fb42229194450b95fbf57d8d391ee3412a77374c5d3cd53138335b50250e33a1c7c4fd200378dade7954b2500445e4b7631a95e
- SSDEEP
  
  1536:8pgpHzb9dZVX9fHMvG0D3XJZ5abZyNTXpUnax++HE63ttNESPA6C/0qC:KgXdZt9P6D3XJ3aELpIcE6rF60qC
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/DLLWaitForKillProgram.dll
- Size
  
  28KB
- MD5
  
  9c4b8ec42d89f7557bfd90798ce52787
- SHA1
  
  2376dde426ea65aa27c30e304086310605382475
- SHA256
  
  ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
- SHA512
  
  17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
- SSDEEP
  
  96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/DLLWebCount_new.dll
- Size
  
  28KB
- MD5
  
  f16f5feebd9b431a8bc63456c0ad267c
- SHA1
  
  acc75cfa3ed7888334aa2ccf305a6c6c58a08aaf
- SHA256
  
  5417af0fc8284e9745650a55803bb34217e314096dc7cedf113c960624ae08ad
- SHA512
  
  ed1e62d903b511a29abd5def4419b5afa63699ee2d1c91a9d884ffb01d7debe5981559574cac4885140d1f27f4275be56236f5c6f1c327147dcac8893f965512
- SSDEEP
  
  96:3YP18J49uJPeaFX/0gOtJ/9nMjbnbk2Zl1bU6i9vtmAuSBudGaTA:3f1bFX/rOtJ/lMvbfJU6snpYdb
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/IEFunctions.dll
- Size
  
  3KB
- MD5
  
  9701818d39318145dd164794ef3a3846
- SHA1
  
  7db701f8dc19163d46ba88e8b68d8dbf428a8152
- SHA256
  
  3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a
- SHA512
  
  d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  eef9e469e8a30717974499f277d97e2a
- SHA1
  
  2d33c25984ebd9116beeb55cdde4c5c86c023e5d
- SHA256
  
  1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
- SHA512
  
  d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
- SSDEEP
  
  192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32