2d4df1dec8cf9ca27f8a54a851ce95cffe290f71a88cfa17b34ae92e15297d8e | Triage

Sharing

General

Target

81c822dc58e396560f0be681fc20e4fc_JaffaCakes118
Size

346KB
Sample

240801-1agmgawgpj
MD5

81c822dc58e396560f0be681fc20e4fc
SHA1

52e05da2d178400dcef0e1a44235af24c050ffa6
SHA256

2d4df1dec8cf9ca27f8a54a851ce95cffe290f71a88cfa17b34ae92e15297d8e
SHA512

b6f7b2898aebb50e38a1527ba5152bb9513238b4b2841c97c4e06ccbc1db02f20fee3be77549af0f7c7c3fc588f5ac32c900cdeafb81ca93e3332cc29bb241ac
SSDEEP

6144:9s6pw0Q2AJVvt3qBzpigp23HSjXRvLWUBMZ72fD6QwZRnG67wFUq:Rp0nJVwiz3HS1WemsD6Qw/9GUq

Score

3^/10

discovery

Malware Config

Targets

- Target
  
  81c822dc58e396560f0be681fc20e4fc_JaffaCakes118
- Size
  
  346KB
- MD5
  
  81c822dc58e396560f0be681fc20e4fc
- SHA1
  
  52e05da2d178400dcef0e1a44235af24c050ffa6
- SHA256
  
  2d4df1dec8cf9ca27f8a54a851ce95cffe290f71a88cfa17b34ae92e15297d8e
- SHA512
  
  b6f7b2898aebb50e38a1527ba5152bb9513238b4b2841c97c4e06ccbc1db02f20fee3be77549af0f7c7c3fc588f5ac32c900cdeafb81ca93e3332cc29bb241ac
- SSDEEP
  
  6144:9s6pw0Q2AJVvt3qBzpigp23HSjXRvLWUBMZ72fD6QwZRnG67wFUq:Rp0nJVwiz3HS1WemsD6Qw/9GUq
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/FLVProPlayerSetup.exe.exe
- Size
  
  119KB
- MD5
  
  3cbc590304266dee068bf18e3c3818b8
- SHA1
  
  f9a60d975c8efdee95428008e42bbd549eef3022
- SHA256
  
  61fe46a54ad6ad72fee7ccac2fb4e6d0b049971a1ed1597db4ea93949feca2a1
- SHA512
  
  5f06cfa7d72a7eeb743c50050be4c984bea37ce7ae59f26ec5d7244034f993df70bad9489bc5f971ea2569f937ecb6402ccafd6cfcbb2cec28b5457caf5a5385
- SSDEEP
  
  3072:XQIURTXJXNuq3h/PeAGp6hFoJas30XhKBU5GM7Tc/1FXB:XsBNvhbGcKHERHGM7TcdFR
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/Processes.dll
- Size
  
  35KB
- MD5
  
  2cfba79d485cf441c646dd40d82490fc
- SHA1
  
  83e51ac1115a50986ed456bd18729653018b9619
- SHA256
  
  86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
- SHA512
  
  cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
- SSDEEP
  
  768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/blowfish.dll
- Size
  
  60KB
- MD5
  
  926e4475c00fb5254c32c876921b77d0
- SHA1
  
  8a55bc8b6e49021a4abbd441783c41d5e019798b
- SHA256
  
  d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
- SHA512
  
  53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
- SSDEEP
  
  768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  c10e04dd4ad4277d5adc951bb331c777
- SHA1
  
  b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA256
  
  e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- SHA512
  
  853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP
  
  96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $R1
- Size
  
  26KB
- MD5
  
  7d2e683442a2d7edc7a66ab360ad63cd
- SHA1
  
  d0073f89727b28f21236bac752accf9034e23435
- SHA256
  
  7b70dfa7779cb19accec149811d1c8d49eee7d0bef44896d90addc7ab31c427e
- SHA512
  
  8c66529542f4acd1a9370981d901b968b15c437603ec7df378ed9000316ecb526e29e6273fe14aee5b316476788aef2f308c2b213152f38c3a29620564e08293
- SSDEEP
  
  768:QYZkGtB3e/y6o2MK22DWtz3pcoCR4K9/wGM+O:QlmB3e/yeMvDtz3pcoQ9IdX
Score

1^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/InetLoadEx.dll
- Size
  
  55KB
- MD5
  
  9fae574b1004bb0650eebba3d8040c59
- SHA1
  
  541583ec14af05915b8efefe520edd4f25914c9a
- SHA256
  
  73f4a1529acf2ea56d4db9ed8134bed0498cea38903105f7c2af8cc7d11b8db3
- SHA512
  
  ab25c429301f2d8a2da6b7c2a222c4028ad8e393c67dde83606762a8ba49c6c49460538624a799969dd0b3c810623d7e471c65a390e8661228a621580d7d54c7
- SSDEEP
  
  768:WFKaQrcF+ntygjX/+qEg469TRphsguCtPQpcQaa5jZ19K:WIaQrs0kgjx9TRsg1ox5H
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/Processes.dll
- Size
  
  35KB
- MD5
  
  2cfba79d485cf441c646dd40d82490fc
- SHA1
  
  83e51ac1115a50986ed456bd18729653018b9619
- SHA256
  
  86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
- SHA512
  
  cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
- SSDEEP
  
  768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/Progress.dll
- Size
  
  80KB
- MD5
  
  15e01578481287bbcf32d2217f1b5246
- SHA1
  
  67a7d05bb2f8b33980867d3352280fa0cd0b4e9f
- SHA256
  
  61d8f9eba68cc6e2a83ec6d1689b2aa45e06bc32e13cdfcec8b593a14bc8bf70
- SHA512
  
  9a83832faf20eaef5043f69d468bfe032d790274df25bae73bce4f7830ac83587d7e23dba531bff04951cbed67399386d9ea4337002a99d8cf61de3f8e33b674
- SSDEEP
  
  768:WCFSITRx/imU5IBAczjPj+NbHHFJUzWwrhABjknWgiLLhfv09jaYhdb5P8mDnbK:+8xzUKBZo0zWWhskjiLwR/5P3b
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/blowfish.dll
- Size
  
  60KB
- MD5
  
  926e4475c00fb5254c32c876921b77d0
- SHA1
  
  8a55bc8b6e49021a4abbd441783c41d5e019798b
- SHA256
  
  d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
- SHA512
  
  53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
- SSDEEP
  
  768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/nswg.dll
- Size
  
  182KB
- MD5
  
  4f2b563f712670211d0e932e43b6e277
- SHA1
  
  53014306f362c90af7f58ad546237e6310e58fd3
- SHA256
  
  9319a8a37139cbc5ac27e9f4c4583d615929a9ea681f5212a5f7bad07fcdbdff
- SHA512
  
  414839a7e4b4d07d4f9c0b10ec708d12547b6866b9567383c0784abb77631a1b60e24a4d450980f8f6c97249b319150062566e12d44bd35b476f9f06aec66652
- SSDEEP
  
  3072:EjcNKEYgmbSZZWxRw+LvCUDk7rkOFyCUQ9C4jO1wMPCxb5rw06w:JNMOWgmDk8Og9Q9C4jzMPCxhw1w
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/welcomepage.html
- Size
  
  5KB
- MD5
  
  4df1fdae99a99c7a202e889dbd41d33f
- SHA1
  
  0bef5beda262ac4c011826ef65ef65d1dda5f5c5
- SHA256
  
  f5792ef5d085448c3aedb3a5338c1599372bbbdd18012c00ef36f198fc910fe8
- SHA512
  
  6471a002a1215f4c74dfb9d3e75815a21d0cefde0f25c1223a8cf7a70cb0edbccf8be54f08008a88a13877987fe29f855bd9b6bcb2fc22b355acb57176eff87a
- SSDEEP
  
  96:SI32bJiWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1DuspXqN35yN64WVAPt:SI0iWEM6Sf75ugffDtIDHEBDzwfF//4M
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/welcomepage_noadw.html
- Size
  
  5KB
- MD5
  
  503788b7c7fc1e94d3881697dc0f9455
- SHA1
  
  c9710548dd90191732aa428957988039d9014ced
- SHA256
  
  bff319cb4251e23c995abc742d926b7c85b9798783ac9dad8e8cdc274ede423c
- SHA512
  
  138f60cc8d168004325dcf2452f24fdd29a3fddc6f693326d01c614a6638c1d40ce9f7b1766b9440de8012d05977adc0f2b92eb02aa76d44ee7dfbc99cd24748
- SSDEEP
  
  96:SI32bJbWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1DuspXdNy7Pt:SI0bWEM6Sf75ugffDtIDHEBDzwfF//4r
Score

3^/10

discovery
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30