3e4fbd7bde760cf8340ad50680300a7f221925c0ee3ef2ff9d30d4cce9d6c094 | Triage

Sharing

General

Target

888460fca953ea7b6fbe6d1aee31bd49_JaffaCakes118
Size

569KB
Sample

240811-b65azayhnq
MD5

888460fca953ea7b6fbe6d1aee31bd49
SHA1

914ee7332f255e44c9804799a23521359bc14f4a
SHA256

3e4fbd7bde760cf8340ad50680300a7f221925c0ee3ef2ff9d30d4cce9d6c094
SHA512

373c73b3b5546c63d0ad9f3f8dd41c6268d139666a022301500c7a8339a537e3df4d96d168e7fca1627e613271456f4dcd20b1281495f87a50d6a58b44a59791
SSDEEP

12288:ypIwBiioqKlIKJhMeCyfMW2teDR7yJff/rVaLPHV1a1eL45GoKoNzG32a:ciioxIKYpdzRG1EtRKuG32a

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  
  admin.php
- Size
  
  8KB
- MD5
  
  ffc9868f76a5c0804f395ce39969f0bb
- SHA1
  
  4d3dade64e1c9044b81826c8be852bea56fd95cd
- SHA256
  
  fa6ad3b33c2c59e62a2be8535f45bdcbf528da2d460e7710a3b85b61a30fc832
- SHA512
  
  a2e5b9e1e04771a2593111ab585db68d0928128c1e3609795838c9240278742b28b8ceda8682eefd47052ee303af828dedccfb45c4a36c78ca61d145c851f132
- SSDEEP
  
  192:V9IiSqyVgVrwJRyCeZwBp3iyD/38msk3ktRh/kCi:V9u+rAyC3JDv8msk3wRh/Ni
Score

3^/10

execution
behavioral1 behavioral2
- Target
  
  admin/comment.php
- Size
  
  2KB
- MD5
  
  3a84264c3b37cdffe7ab08710e208532
- SHA1
  
  2b097fcb8a71c6525124f96f414f871be9c47035
- SHA256
  
  9c72e0ddae9ea1e14369ac9946f8cee383a6545bde69481b6e4cc02b956a5c2e
- SHA512
  
  94991ce18d2c08f8c0b17385c1354993ed3b1a4612c38eed1a7a9735149f50498e474a8ff054edb5a7875535ec941ae2f61798eb4c0fdc914fe25cf2024ba1fd
Score

3^/10

execution
behavioral3 behavioral4
- Target
  
  admin/global.php
- Size
  
  18KB
- MD5
  
  afbdfb8fdbc928672c458a0624debbc3
- SHA1
  
  b441cf52734429225cdb15dac966fbc0774c4f98
- SHA256
  
  4f35d43456a9f0c3ee05e7df6391ece15b0e7c8a1aee9dc3fff964a74cce730e
- SHA512
  
  bd75098dacbefe95f64c5c146e0c4d751bf7c2980f9cd1092d2a41a745ca45b8aeefd2f0cecdf03df01ebbf9390a84a42647247cf40dee90d8171754ece2b401
- SSDEEP
  
  384:82blN9JsPN5duV7J/wF1/pCmpCtcBOuXmb6w:8Cn9OjduV7hwF1xCcCtcBOuXmb6w
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  admin/list.php
- Size
  
  6KB
- MD5
  
  069da0185602884fc3a26bfe005fa1ce
- SHA1
  
  dd068f6c2559bcdf43aeea31a0016de70cbc9bd1
- SHA256
  
  8a6675fd8469076fafe9c96fd1cc2c85575489c4bcae806bda4da525958e13fa
- SHA512
  
  2901d26f9adcbd0ea3af0c499e588a500809a9388332322882590ad532ad406027ea8e552ac1b6b254b5bf00c0f2182fd7132e84a85bd0d3aa5a3c25c35d5698
- SSDEEP
  
  96:LYUKm/SHh3nqXMwXJcgp2nJJmnUeSyC4XKE4wCR6LmJBqsZ0Zjhn0zt0x0FfB00c:LhEM9KE4wmQajG7IjxI
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  admin/module.php
- Size
  
  19KB
- MD5
  
  9c1f20f029aebd79af19932f19ded6a6
- SHA1
  
  ed688ec467e13892d6f53041beb896ca374aa32a
- SHA256
  
  e70fa022c0ae3bb4273fb3e63d803685a1584bf855fccb4f9b16b51ef87a3e76
- SHA512
  
  54749f051c35fa1866b38e810138f50f3324c5718362c42e086ce59740f959b6f5873df718dc0d9ce5bc100e5fa00ddf689d9a3edc96247ca39e2a784439b26c
- SSDEEP
  
  384:XHj/jNnwH19yhZ7SSpxr1Abff5oq5vQkBhXxQm/i1M4S/Z:XHj/jNnwHQSSpxr1Abff5oq5vQkBhXxj
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  admin/mysql.php
- Size
  
  14KB
- MD5
  
  6174e996a49915efd21130e8120d4c44
- SHA1
  
  153a2d9ad9656ee8cc328316be796c9e082803eb
- SHA256
  
  753e875fe80a2c246b23cd1da8d72136c19c5e06d136db84f0a3b177d19805e1
- SHA512
  
  174d7d588cc47c65bf77aeac1bb3264ea003f38a18acd6aea0201d16b72cc7715720192e488149f56c19eb1b60c87d8d64f6bf170504f7fe9652fe8baef9110b
- SSDEEP
  
  384:4Da+jyZ7pxg+iOacNudPbBqPggqUQS+rKzLZ2:9Z7pxg+qccqo4M
Score

3^/10

execution
behavioral11 behavioral12
- Target
  
  admin/replace.php
- Size
  
  2KB
- MD5
  
  b9ab463b8d0ee818909ffe4b75f2edb9
- SHA1
  
  cd737120cf7f19d724ec46598db9b91920991c62
- SHA256
  
  97a2211bc6ec738509fe4cf9a65d393b3594235d9b1b34216684f16d3b84b467
- SHA512
  
  920dca6434409f79aa82b39a01dd231c88e39fafef005429dd3df472a3ff3253f21c38479fa1bfc75a7557a29c5184c1cd539d514769552e3604ff8b6497497f
Score

6^/10

execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral13 behavioral14
- Target
  
  admin/sort.php
- Size
  
  19KB
- MD5
  
  fe5bebbcbc9d290f2679a8c202f22fee
- SHA1
  
  fd8e6d5305e48ff25e7807035415295f90930766
- SHA256
  
  a231fee47f904f2b7183f11d0ccd6e4354940f3174375e03d7365a33aa8d2414
- SHA512
  
  84159e50ff02f5d3bb01a113551e753457e3783e13a82c323d890bcc7c1fc4752641a02c65b593dc6ea41d1718698e03aec9e38ab4ed511f8996d90bf3460a42
- SSDEEP
  
  384:UB1lKowOat+anTYc12a78p8XmFnVs5l/eGpwODst5:UD+Oat+a8c12F3yqOwj
Score

3^/10

execution
behavioral15 behavioral16
- Target
  
  admin/spsort.php
- Size
  
  22KB
- MD5
  
  20c3aa6a3964477e3e609a0f32369bfb
- SHA1
  
  816a5638bb9b8614da7345c5147daec92a907e12
- SHA256
  
  5133c3d33deafa095bfd840536bd2882d3f705cfc99fcabb526c433182246518
- SHA512
  
  edacc27fe0784df3223a6e5bab0c39dbd4e376b8e3c733eff96b7dc6f54ca830a10835001a9d4bcf0d5121972e3de44533cac4dd8ee55a5aab485c282f039aca
- SSDEEP
  
  384:YjTSt01soXBuIYvuvXWyHXWvXWFBXN2hlDdPQY:Exku34hn
Score

3^/10

execution
behavioral17 behavioral18
- Target
  
  admin/template/ad/addad.htm
- Size
  
  3KB
- MD5
  
  0fb445ae7e5056b0ee99c3fd25835129
- SHA1
  
  60842803d11f18d649b5620e808643e7e6738d23
- SHA256
  
  4e24e0a4eeb709956009ecb2179830bf8f689d15d504958f4ff4cb5d12607715
- SHA512
  
  ff5570e75d7d0f5e1b62355f6be472b6c7573d37ceae4cbfb24a51d5882c05e81d9274e0ca95292321facdd03d0c71e42601378b9b44c098d6743989eddcccc4
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  admin/template/ad/addplace.htm
- Size
  
  8KB
- MD5
  
  74944f92d490c5e1500128911bf344b8
- SHA1
  
  f71295a469aaf54937ca926c99aa09c83f0dcd65
- SHA256
  
  9a9416543b37cb223408917ac6061fb676756e886375757b213d8249a0ba8c72
- SHA512
  
  9c915a82a7ef77f49483fd5bae2fb6b1e681b940972f92495212cb9cfa69a92135a4b01e336a0755ab3cd341f28f93fe2eb4df611d350d6aa3eb5d6dcd667a9e
- SSDEEP
  
  96:cc83iQs/B5xp0dOjLJBcShvV2Em4pXoj2Yox+yKxmyontyoxK+swexh:oiNYOjFqsJm2Yox+yKxmyontyoxK+Qz
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  admin/template/ad/listad.htm
- Size
  
  1KB
- MD5
  
  deeb80cbb5fc2cea6632d1b5606407b7
- SHA1
  
  2340a6c32b623734f327cc5fa7f63bac6faefb75
- SHA256
  
  7ea043de3bb821346a424eceebba57a123ac50472bdd35c2e6ac7d1a60c4c4f9
- SHA512
  
  cbcedfe1985ecde2b9a3acbdef9800b181b3807867b0fed323a9211597f1051b314c7919c33e4ccf9f490da9cd83e1328b0ead4b422fe8f96eee2f048ea5d92b
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  admin/template/ad/listadplace.htm
- Size
  
  1KB
- MD5
  
  fb7b7818c22bfce4b030f2818ff43484
- SHA1
  
  18698a4f9af96e834dc6aed1fda5019b3d2cd04e
- SHA256
  
  7833a1204a01e66a76c4a22eb787671b04a4ee168b36de0184bf584d71968336
- SHA512
  
  f1c310ac218cd3d38b9295c14291c6169e40cd97ac425446886e5f293b5cfe36ef0bea868751b6015fdfd2b0d0b2a74a5e9111fcb86f88b0ab958f721134e9c7
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  admin/template/ad/menu.htm
- Size
  
  458B
- MD5
  
  fdd0f7d24916b80f82139d5dc40ad2ed
- SHA1
  
  19697c40792f4dc1b8c6993c3b671cf32df5557f
- SHA256
  
  1d2e8a2e6839e07a0f87b3fe2b5fb8b35852ab4802f3c2a43cc93c576fa72448
- SHA512
  
  945cd5aeef3a84e10f4873e01cdae0398eebf08261ee67c1a9a7f265361dcdd81c8defa70844c38866deed049ec814b8d17cd3331fe7aef0dce6e50769f45c31
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  admin/template/autopass/set.htm
- Size
  
  1KB
- MD5
  
  9d03e8f9823489be5d8b759d9faf5cf8
- SHA1
  
  d4ac15b615b258340cd2170d42aed2f9c1efb044
- SHA256
  
  da1bd24285dd4db1140cc9d16df2e724b09d8306f3044aae875116978118e024
- SHA512
  
  6d2cf3e685018f9762aa2cdfce3690fae44ae573bb1d29ec59b770d440f1e45db96874f3ee4b73e7b0cbfdf9c394efa541e00e854d3bddc26a80660aab800b5a
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  admin/template/cache/list.htm
- Size
  
  564B
- MD5
  
  5352a498d761adeda2f7bffedb68be71
- SHA1
  
  33ff83554a6e6cb1757ce023dec724d4ae8b238a
- SHA256
  
  c83b313af30cfd643677d0a4a6792e28ef482a4d4905694b5476763bfed693c3
- SHA512
  
  6bcc3fe28b084a4bcea0a29bdc04e19b4d8d252dfc01c7cae1b35666e1612d3e4cbf383ec40f60ee4cbaf7d81f8ab8e92f44264e236d6ea94c57ebe0361e07da
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32