43b6fd053240a7ce06a73344918e157692fd559ffee0167e3a3bc8a1dc8e36d6 | Triage

Sharing

General

Target

836ef92df7587d90b7909493387b6de5_JaffaCakes118
Size

611KB
Sample

240802-hmwyta1hpk
MD5

836ef92df7587d90b7909493387b6de5
SHA1

4572cfbd828dcd7b4d8a7986ae2674c5215eff1a
SHA256

43b6fd053240a7ce06a73344918e157692fd559ffee0167e3a3bc8a1dc8e36d6
SHA512

cbe612788f28b93bb706dcd2fdc08eb42983657eebbd4fa7e94d8e4d84a42aedc4b6e3da7e733214ec870126841008dcf60b3d39319259e3366f3c9184eb3cd1
SSDEEP

12288:Rp0nJVwiz3HS1WemsD6Qw/9GU76MrTx05cw6EllyCFBU7:wnJ73y1WPsD6QCTu1qullyC/U7

Score

3^/10

discovery

Malware Config

Targets

- Target
  
  836ef92df7587d90b7909493387b6de5_JaffaCakes118
- Size
  
  611KB
- MD5
  
  836ef92df7587d90b7909493387b6de5
- SHA1
  
  4572cfbd828dcd7b4d8a7986ae2674c5215eff1a
- SHA256
  
  43b6fd053240a7ce06a73344918e157692fd559ffee0167e3a3bc8a1dc8e36d6
- SHA512
  
  cbe612788f28b93bb706dcd2fdc08eb42983657eebbd4fa7e94d8e4d84a42aedc4b6e3da7e733214ec870126841008dcf60b3d39319259e3366f3c9184eb3cd1
- SSDEEP
  
  12288:Rp0nJVwiz3HS1WemsD6Qw/9GU76MrTx05cw6EllyCFBU7:wnJ73y1WPsD6QCTu1qullyC/U7
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/FLVProPlayerSetup.exe.exe
- Size
  
  381KB
- MD5
  
  9d90fb874befd1ba3c5b3937a2ed9819
- SHA1
  
  e7da36e1ec73cf58d30cd084fc4cca5c44909020
- SHA256
  
  a457a97eb2930afaad8649959e3904a2252fafe2e6695cc3a3de9ae7a0820fb5
- SHA512
  
  dcd78f12342ed074765b4a4c171b34ea6d9d6c559811d1800709938f9742561854aa01e897e78e0a11590f6ccbcdd220831e96bfbff11c9086fdd7003b558c95
- SSDEEP
  
  6144:XsBNvhbGcKHERHGM7TcdFldr20xDSsGM+s3T4wC47V2UaGLgsFmF60pAkNHqFnvb:ev1P0Y+FldzxmsZ+s3c3UaGLgseBpNHE
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/Processes.dll
- Size
  
  35KB
- MD5
  
  2cfba79d485cf441c646dd40d82490fc
- SHA1
  
  83e51ac1115a50986ed456bd18729653018b9619
- SHA256
  
  86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
- SHA512
  
  cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
- SSDEEP
  
  768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/blowfish.dll
- Size
  
  60KB
- MD5
  
  926e4475c00fb5254c32c876921b77d0
- SHA1
  
  8a55bc8b6e49021a4abbd441783c41d5e019798b
- SHA256
  
  d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
- SHA512
  
  53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
- SSDEEP
  
  768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  c10e04dd4ad4277d5adc951bb331c777
- SHA1
  
  b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA256
  
  e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- SHA512
  
  853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP
  
  96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $R1
- Size
  
  669KB
- MD5
  
  09964e3e53c96a8456531a15d89dfc11
- SHA1
  
  0d62b2d7c22704e323334218cb1e5dc25a73c8b0
- SHA256
  
  fef433db00407e7f235b3ea612a590cff76abc521df5b46f873a1b4f2c32930a
- SHA512
  
  5c4271e0b46c0f67fb8ab0a93c593640bfd8f6b9f65cf881dc94490ef7f3ad38a4d6ef2334ce82fb86ac2d98d4d53f40307bda58da804683ca73044f506acc49
- SSDEEP
  
  12288:xiGTowGTuTk5AbwnW+C+OAYYoinVjD1uJK5C+j:kPP5nR8inhD1Uw
Score

1^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/InetLoadEx.dll
- Size
  
  55KB
- MD5
  
  9fae574b1004bb0650eebba3d8040c59
- SHA1
  
  541583ec14af05915b8efefe520edd4f25914c9a
- SHA256
  
  73f4a1529acf2ea56d4db9ed8134bed0498cea38903105f7c2af8cc7d11b8db3
- SHA512
  
  ab25c429301f2d8a2da6b7c2a222c4028ad8e393c67dde83606762a8ba49c6c49460538624a799969dd0b3c810623d7e471c65a390e8661228a621580d7d54c7
- SSDEEP
  
  768:WFKaQrcF+ntygjX/+qEg469TRphsguCtPQpcQaa5jZ19K:WIaQrs0kgjx9TRsg1ox5H
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/Processes.dll
- Size
  
  35KB
- MD5
  
  2cfba79d485cf441c646dd40d82490fc
- SHA1
  
  83e51ac1115a50986ed456bd18729653018b9619
- SHA256
  
  86b302fa9c85dfa0c1c03ba000864a928365dab571f3355347dba02da22949b7
- SHA512
  
  cca186a7f9c5cff3f4eca410fbe8cc13dad2514a7e36aec9b1addfbcb239ace9b9b2d8427771858e3fd11783abce7e24d43c286f98da9f8b17562ca095a4c043
- SSDEEP
  
  768:uxEiycFoaj/+WSiJfmjvab7L/cUf7IIlMLRF:uxEm7sgfmjy//cgdlM/
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/Progress.dll
- Size
  
  80KB
- MD5
  
  15e01578481287bbcf32d2217f1b5246
- SHA1
  
  67a7d05bb2f8b33980867d3352280fa0cd0b4e9f
- SHA256
  
  61d8f9eba68cc6e2a83ec6d1689b2aa45e06bc32e13cdfcec8b593a14bc8bf70
- SHA512
  
  9a83832faf20eaef5043f69d468bfe032d790274df25bae73bce4f7830ac83587d7e23dba531bff04951cbed67399386d9ea4337002a99d8cf61de3f8e33b674
- SSDEEP
  
  768:WCFSITRx/imU5IBAczjPj+NbHHFJUzWwrhABjknWgiLLhfv09jaYhdb5P8mDnbK:+8xzUKBZo0zWWhskjiLwR/5P3b
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/blowfish.dll
- Size
  
  60KB
- MD5
  
  926e4475c00fb5254c32c876921b77d0
- SHA1
  
  8a55bc8b6e49021a4abbd441783c41d5e019798b
- SHA256
  
  d54c8582863c079996c4f1113b1c106204773ad9ea2ae831ba2b33b45bafdfa8
- SHA512
  
  53f389e1a967c123ed591c7650cf6d3140abf1012dcac90faf2327e68558949eb2b19905098bd14ab3a9811d23f98466f88418d992ca6373f94afae56a285bd8
- SSDEEP
  
  768:iqdVHQr1iIxqXiURXB+tzjjrrzhzlRryN+SaYhba3mrf+C7jWk1MLfoMR38:iawr1iIIXYplRrOk4f7HML1R3
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/nswg.dll
- Size
  
  182KB
- MD5
  
  4f2b563f712670211d0e932e43b6e277
- SHA1
  
  53014306f362c90af7f58ad546237e6310e58fd3
- SHA256
  
  9319a8a37139cbc5ac27e9f4c4583d615929a9ea681f5212a5f7bad07fcdbdff
- SHA512
  
  414839a7e4b4d07d4f9c0b10ec708d12547b6866b9567383c0784abb77631a1b60e24a4d450980f8f6c97249b319150062566e12d44bd35b476f9f06aec66652
- SSDEEP
  
  3072:EjcNKEYgmbSZZWxRw+LvCUDk7rkOFyCUQ9C4jO1wMPCxb5rw06w:JNMOWgmDk8Og9Q9C4jzMPCxhw1w
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/welcomepage.html
- Size
  
  5KB
- MD5
  
  4df1fdae99a99c7a202e889dbd41d33f
- SHA1
  
  0bef5beda262ac4c011826ef65ef65d1dda5f5c5
- SHA256
  
  f5792ef5d085448c3aedb3a5338c1599372bbbdd18012c00ef36f198fc910fe8
- SHA512
  
  6471a002a1215f4c74dfb9d3e75815a21d0cefde0f25c1223a8cf7a70cb0edbccf8be54f08008a88a13877987fe29f855bd9b6bcb2fc22b355acb57176eff87a
- SSDEEP
  
  96:SI32bJiWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1DuspXqN35yN64WVAPt:SI0iWEM6Sf75ugffDtIDHEBDzwfF//4M
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/welcomepage_noadw.html
- Size
  
  5KB
- MD5
  
  503788b7c7fc1e94d3881697dc0f9455
- SHA1
  
  c9710548dd90191732aa428957988039d9014ced
- SHA256
  
  bff319cb4251e23c995abc742d926b7c85b9798783ac9dad8e8cdc274ede423c
- SHA512
  
  138f60cc8d168004325dcf2452f24fdd29a3fddc6f693326d01c614a6638c1d40ce9f7b1766b9440de8012d05977adc0f2b92eb02aa76d44ee7dfbc99cd24748
- SSDEEP
  
  96:SI32bJbWEMkTSf7qOugnffDbhIDbbE5zDbnwEqqc/zIxG1DuspXdNy7Pt:SI0bWEM6Sf75ugffDtIDHEBDzwfF//4r
Score

3^/10

discovery
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30