8a98959bd08625a79795b643f3085a26efcb3a0741ca7ec271176592fa8680d8 | Triage

Sharing

General

Target

7d1e65f7395b7e986d1a5ac76ef5549d_JaffaCakes118
Size

1.1MB
Sample

240731-txc48sxekc
MD5

7d1e65f7395b7e986d1a5ac76ef5549d
SHA1

e7af12a5ce1574885fa5ac4a3c8743eec9ddee2c
SHA256

8a98959bd08625a79795b643f3085a26efcb3a0741ca7ec271176592fa8680d8
SHA512

f4e45cb1cc8a446a9741a7676d554782bc327eeecb0b406c768995f890c376c537c8513e2296e1540cd1a68e46444049799efb82f208cb33ff0fea35dfd06987
SSDEEP

24576:GBYxbTPXXU0xvqu6aMkVM8fmMTSWopnD60Z19KAYXE3AIb:GB0XPwFXoTUnDXLYXE33

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/admincp_credit.php
- Size
  
  936B
- MD5
  
  9dba31ff5873764a395939babe5cac1b
- SHA1
  
  aa06c3596ad19ffc64c96f235b0d655e71e030fc
- SHA256
  
  7667ca06bacd7970eabb99117717e500b51f01cc3143e0435f4cda906b5f96db
- SHA512
  
  fbb8c35474a5b97bc3bb02df2abe878f218f641f392a071a3b1bee88eb850f09cef789b5531e32bdff50eb7a4671e1654fe43655d944a851a6e8ded7e17a0655
Score

3^/10

execution
behavioral1 behavioral2
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/admincp_privacy.php
- Size
  
  2KB
- MD5
  
  137097df4bb062825a3b538908a49ba2
- SHA1
  
  aea142d506590539ddcbfd8ac95e7dddf4965421
- SHA256
  
  0dbd413c918b1b65302c14180896e807e6a4cae5bc59b63c728fbf3b1a7bb6db
- SHA512
  
  81f2ee7f365d2b47a3d126b09859ae548492f455dc6198495597de63fd4467fa9a5f175f6b792ee64ac45d70e3185cdda14fc36947aedbae87142fce83fe9766
Score

3^/10

execution
behavioral3 behavioral4
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/admincp_usergroup.php
- Size
  
  5KB
- MD5
  
  fceb610181788f9943633c705c66c484
- SHA1
  
  8d2d34e819d9652d23d7bbdd2207fafa09e5f72a
- SHA256
  
  90b333ff603c04c4a8a238a100a80f9ac5f720454fbe89541e71f8c85b48a3c0
- SHA512
  
  a35e6f785775d56ce0601aac5601bf51f2f1f63ea78a7dcf00c17cd56c2113548eef29b60a6adc140f91e902df9b5f77c6dc9c42b3e3e325f744fe0b54c7f5d0
- SSDEEP
  
  96:+ib65AdeMrQsUwYPhaaTnXav1CGcD5fBDx2WCH3N/egy8tk6k6lj:+im7wYPoazXHD194Wc/Bu6F
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/index.htm
- Size
  
  1B
- MD5
  
  7215ee9c7d9dc229d2921a40e899ec5f
- SHA1
  
  b858cb282617fb0956d960215c8e84d1ccf909c6
- SHA256
  
  36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068
- SHA512
  
  f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/ad.htm
- Size
  
  7KB
- MD5
  
  a898e001f84a921ac3079a81e7d1df90
- SHA1
  
  1f5739b3dad918aaa011b9540b073cecb63aedb8
- SHA256
  
  c82804babfede711264f2051e64f5f2302834d9c10fe2e340a2e98411369014d
- SHA512
  
  0d422d4e13f0bcc210f9148e2a869065749b50210e76b16e24329d93e01d048b5074e026f1ed5d08005434a282f6b31aad99c9b8357172f34e5541200f157d5f
- SSDEEP
  
  96:iLw0YievdN9tPEZg3Kh97HgRQwjAezAe9H9IlpJw:nd3muioQw8he9H1
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/album.htm
- Size
  
  4KB
- MD5
  
  f520d9c5f952077110348d36612be33a
- SHA1
  
  ba23a7ca6c28d53eb96cb08eed1fae47dc825516
- SHA256
  
  3a39c8352bc71c30e68e848a866078254b82e9ae3d6042531b5447d293dd0b52
- SHA512
  
  67b0eaf103be5c28928db4bf5a31bf379bfcb14340b7aaefd485ff4276d74ba0cb37068ed137e31ce4a20af279072a5fbe9dd64fd2cd90e399c87acf669d0468
- SSDEEP
  
  96:ErJ4p/XrCr6oQ26v1baDpYegW+sYkGml80lIBlBWLd:fpDCr6oQ269baDWegW+sYkGml80lI9Q
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/app.htm
- Size
  
  3KB
- MD5
  
  fc82e6c19388ca4e247eedef1149debd
- SHA1
  
  f1990a10227d4dbc10a6cb4bb8c555a1a2d32703
- SHA256
  
  d4d00cdba33d5bd11f7ea6b84a8b1d2fd5ba3057733d5f99c0df45af7a9b0b54
- SHA512
  
  f903db923c08527ebcfcba214ffc4c84f00b6be3e74a45cc98e8343b77c63b5a18d7fde63db8b4effc52e9431c2710f147ecf0f23af6a3284f6753e471785347
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/backup.htm
- Size
  
  11KB
- MD5
  
  4177b4e313d985e5fd7ae251c928a483
- SHA1
  
  f279ece84b5144dec4a02168c245db9d0c56a897
- SHA256
  
  2449cd3ad71b59263c1caa5680e01ee8e6c59a88fd6f7b17a3b3b121a73fe121
- SHA512
  
  828f41eb1818799fc661c452329eb7ad8b10f73ee19dbfa60b313c30e44da115dd8fc9c54e8e2207f882a57ee6b42b5a8d4800ccbb20aac78168ab7f4e101c94
- SSDEEP
  
  96:/qY7FcA/Q4QUlG7jKXUFmMffMcfCWyqR6cVlZuO9twbOwgrX+cxtB5G/BWqvBfns:iAFcMQ4QUlijOt/FgrY/+Ipi
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/block.htm
- Size
  
  6KB
- MD5
  
  42a790b145ee93ecf2e69cdfe25bb649
- SHA1
  
  291c9110edf637b01910afa12875c64f9b1c6983
- SHA256
  
  95b1581b365c80d30009ad18f3c3cec7e14464532e296c91d5ca73634c43f242
- SHA512
  
  df417976adc79ab4abc954255439e44d664e01e57bd173ba724316363674c3c2fa67d5e4e9799961ecc29a5c00a744fcffa9e9742fd157edafdaae36b0db0890
- SSDEEP
  
  96:q5lBLzn7Ayl6I9tXmy03nq7LlfPKBGsUPQfp3XCGf9pK2lpNJw:EBP719Uy0yLlfPoUYpKL
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/blog.htm
- Size
  
  5KB
- MD5
  
  e4f16d4121b075977a49cc95dd37bd9a
- SHA1
  
  573ffb94b6048e2ff77d7c893e083d7487284de2
- SHA256
  
  56e622e13211c71906dd5f24c39ef10c7fa7b0ac0e2dcab75d9fd38ba17ae960
- SHA512
  
  5ed2ab93c75328f9bf4e9db707efb37116f65dadf3ef5bf38d33028c155de48427c3ad73471c7e6de499c9f3e753ea5af71a8e6a0f246b1940607aaa523a1342
- SSDEEP
  
  48:L2233ZyY6fPZPoKX1Lyg24KjuqPongQZBd8xY5ugrorHRgWDERgxsYnTLPoI1bIO:q28jPZPvXRy7uuOGY5borsUDHwxw
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/cache.htm
- Size
  
  2KB
- MD5
  
  a7cd67d698cb19e62405702207e0b568
- SHA1
  
  ab0787d2fce5303c642b1359ada3960a243aca9a
- SHA256
  
  f9fdea7b53ccbb08eb6bcf51076a860f5d043c7439eea44afb4a2106f40c23a6
- SHA512
  
  276e153935ce1883fe1af1f7b90f363929a1d7f147014cfbc51cdbff6aecc7117cd63e48b5912e8c0820026b221e84ea8b747cffe802d3166b6defd2f48b1709
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/censor.htm
- Size
  
  1KB
- MD5
  
  c9e549c79cf0731975a1aabf72428eb2
- SHA1
  
  dc87473f0e499d0032c52603cbd6bad9e9e50cd6
- SHA256
  
  737c1d7122a569829ec051a5100b804837bc49797dd7043324b3ff521584e0c5
- SHA512
  
  adbc46f2a518c7d8e9fd608d546ec9019cc8c1fac86d4bcce0e900e72f6f5fde9db053654403c25807f2ee87e485f14b626528d8e92b1117f6efa0d002dcaf8d
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/comment.htm
- Size
  
  3KB
- MD5
  
  c584290dc5eb85bea24fe5bbaa660ed9
- SHA1
  
  7827c3614d4d99c1a12030c3b7c569620485d8c5
- SHA256
  
  d032ce7380133e206a287599a6f214a97c9d832baa71fd8f6aa94686830fc47a
- SHA512
  
  2622b72bdb27a42b715427abc619577060a07b5017501377d3a84ce81ee6f8e76a4e20eaef5561a3eb83d19cabe4485da4234c0172f25b5b1742eaa9c9ccc4f7
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/config.htm
- Size
  
  24KB
- MD5
  
  62a0a99b746b0b4d5cf9ef7f960e6f75
- SHA1
  
  20cb6bf6cdb56750dfa354105d887913754bbda0
- SHA256
  
  a54d17b3e3954fa116fb663f6520bc63118bc18333fabe480502582ffce9fa99
- SHA512
  
  48a8087621481e77e2eca6c31ba2002d53652f6e08442d9bf3c03f76849e5d5cbaf615dfba809236d157d4bb6e59bdb47c3c0185b75001f79ef79580fdcd13b1
- SSDEEP
  
  384:MRrgWTuNJE8EWvp6W96hcfDscIwELm4JYRc+6Rc9w9:c/TuNJE8EWQWiQDscnELV
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/credit.htm
- Size
  
  2KB
- MD5
  
  bfafa06267578a11587d5146847e0e5e
- SHA1
  
  c5ceff360e97d3c9687d0fd5e6043d7a050ca678
- SHA256
  
  782624415ffaa817290b0b4f9bb86782c35abce17502ec0c7b5a32bfcb80be47
- SHA512
  
  bf8b217d1e8aa1429ad72a7d70026e82462b7f9bfe36ff478f75ae69c6e1d1bc980610a0579274bd00cab508d9c529fc3a1ee69bd6daaefe5b6008e5cbc0d2ed
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  UCenter_Home_1.5RC1_SC_utf8/upload/admin/tpl/cron.htm
- Size
  
  2KB
- MD5
  
  d865338692ffe79f533bb0241c03e66b
- SHA1
  
  9350b11d68ce2bd0ad4f75a87b2daa94b437c87f
- SHA256
  
  42750d79e60cc3c19c97e0df8e6db9591d6fee56bad6b4cba8656e710b4260dd
- SHA512
  
  39d9691444926a8e15f5651d744635d35082538b05471052c0b82dca864a86334c3f72af0b41bd77c5ffe5dffe435aa45b8f6cbb4b3ced61211a83aae4f26d3b
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

System Location Discovery

System Language Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32