4bdfa8e89d95d1ecedd2b2793d8b21c0f71c8183adc10b469bd4032d461fcf75 | Triage

Sharing

General

Target

8a7d4307bc6587fa9cdc5d364d5f3b51_JaffaCakes118
Size

2.9MB
Sample

240811-qf57xa1cjn
MD5

8a7d4307bc6587fa9cdc5d364d5f3b51
SHA1

ad7950d480aaa1afd57c3cf0c5b6570fa31bf0fd
SHA256

4bdfa8e89d95d1ecedd2b2793d8b21c0f71c8183adc10b469bd4032d461fcf75
SHA512

320ee9a979f9af5b0ec78a4cfeeb4388f70dba5151ebcdea7423324259e2103bf385e71823a5de192d5fe35bbf1ee440b2980632a69c328971ccc4ad3e91f133
SSDEEP

49152:sllyr7DaGLyFEUJLQYh8y3EgR5ZMRotUXZ1a6FM0Cc3J9XjOt+Om1NeSnwtg3N+:slicVxl3ORez4s+NNehg3N+

Score

3^/10

discovery execution

Malware Config

Targets

- Target
  
  sample
- Size
  
  9.7MB
- MD5
  
  a8e5f9e3ffdbd8e8f4dddb861cbff794
- SHA1
  
  4b7667ca1653519f5c5898dc5766bb118100ff55
- SHA256
  
  e70487065bf1017f4b09fd68a1032222e5066b0d2191059c962fff55b8cf89e3
- SHA512
  
  04fe8f420d47887cda70976dd216446a5fde157d3e0eb1fc56ad5f535a76dc5d13e992e547939cb603ea94608f4b2d9eb2f94893f479380041bbdb51ee5186fe
- SSDEEP
  
  196608:OxwLjt17fTacw4R8IY6NFJh1yw93pbBDlIkhvy9i:OxwLjt17fTacw4R8IY6NFJh1yw93pbB
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  wordpress/readme.html
- Size
  
  8KB
- MD5
  
  eba8f8e7479da1cf64e520cb6156251c
- SHA1
  
  0cccea4f73677c5b7b875bdcf297b6ea2d85a993
- SHA256
  
  93c069b9ff0515c904ca9447d3c9c344b20c1a1aefb6caec10f128def615c597
- SHA512
  
  398fbe6a4c52ddf7023a867551d75924d393f96460d7359179e004c54b44bf9aed03a173294d64fa585f678d9063e2b5c636f2417da6b80fcdf8a556f523bb3b
- SSDEEP
  
  192:6QWEAVWrD+hQUFzTg7kbifjuu/YmSXSktwLWRdR:6xEMoOFcJf4g8H
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  wordpress/wp-admin/admin-header.php
- Size
  
  5KB
- MD5
  
  2707bae1d07ff8c6bddaf1d25d71407f
- SHA1
  
  d493023455598aaa5db5143f84ad7a1e623acf07
- SHA256
  
  9c5f2307511d92c5b755213e0603a24860fba034988c11bbd1d1a6ce65ed55ea
- SHA512
  
  3a5a703b5e0574a608c690b9e327d0112a53f6e2e274f2b8f58eb011f75a4b86b138d57565af8570fa6ff12b06516ec10e67dfc887c9b95b127561ee0cd03bd3
- SSDEEP
  
  96:HU1cSluWOrd99oZcw5xv0C3YvW8moe3CY8RVgbwwU/HgWuKNQ2Kqdlg:HU14nwWC5BCY8HUwj/Vuh4lg
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  wordpress/wp-admin/async-upload.php
- Size
  
  2KB
- MD5
  
  4647a88677a4ada52fda22374e66060f
- SHA1
  
  43298e88ef3e4cc7bfedec9da2229332544401ca
- SHA256
  
  196769473caaf4ec1ec7dc78243cdce614313d21a60067c55bab75a9dcf7d4a7
- SHA512
  
  a2a5ef88e2c1f9e125c15dcc0cdd324c9e3c9d57f9e6ea61059a5383094bb47082e0fe05e12cea5f1c2b47f4d63804cf07fedcd56801f4e03ae69a425ea6a3d6
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  wordpress/wp-admin/css/wp-admin.dev.css
- Size
  
  59KB
- MD5
  
  2d11b980a3db81f466f9129a9a642c2b
- SHA1
  
  b74906a153bc72846811fd9f3723d7ed4a5c5bda
- SHA256
  
  299aa89d4b2ece5166064f5562e68f4875e14dd1bc30cf71b77f619b67683025
- SHA512
  
  5c5c800fa4f89bb78f3870a6663e229f3f7ee996d47efb1513bfae9bb8ef9b95278071acbaab3085132926e5ba71fc59a5024022dc135541691c6dcbf852dd13
- SSDEEP
  
  1536:V5N4NrLnFSOrLnOCTrOs7+SmcwV3n15g551p8/I0LAUsBsVcBrLnpzFEQAzgXsB:V50rLnFTrLnOmrOsHq/I0LBsBfBrLnp8
Score

1^/10
behavioral10 behavioral9
- Target
  
  wordpress/wp-admin/custom-background.php
- Size
  
  12KB
- MD5
  
  da90f09ddc519dbba52124f7f8859874
- SHA1
  
  5ae7957325c956a635f775c72e3453d6c92c18fb
- SHA256
  
  ede28edb75f8431db28e06d13f264d46852f167e33bd78310c6739d4618abf43
- SHA512
  
  0c3e02a760d209e316fb6fd3dfbfee2c58aaa3db1c5a5293ae7717986c739d1a0523c0f0f401aa6e7d5903a9515fb3ab3a72c8d2eff00b3e8882a6e3e3494736
- SSDEEP
  
  192:upzD2TFIwICdbMirjSKFD1XSD4lDRzDDWtDfLDvtVVupUI1a4zL1XHCfL7WZyE5/:NIIMiNBC856/puBpXXIB3MD
Score

3^/10

execution
behavioral11 behavioral12
- Target
  
  wordpress/wp-admin/custom-header.php
- Size
  
  21KB
- MD5
  
  2de643c54e2b406529cf5d9571ce6007
- SHA1
  
  1c44746bb914e25d646bf2ed3a01090c81edd7a9
- SHA256
  
  d5da450e97102eddbd777988b2b281c3aa48346037fc035da6a12a644e4b9d3a
- SHA512
  
  174433cde152bae145b9f37ae4d67ffb9d720797dc95940dab1b38f75e8d8a4cabc73d7750e795a877afd5e49d978e798b5aef7b8bfe7d4f36788f4bd4775751
- SSDEEP
  
  384:VwCwWG/PB5qz4ObrMheWZNxZviElKe7M4f5j+i4tSO/D8HX7Yxp62:VwLWG/PB5neWZZ6ElpA4fgMO/D8HcxpZ
Score

3^/10

execution
behavioral13 behavioral14
- Target
  
  wordpress/wp-admin/edit-attachment-rows.php
- Size
  
  7KB
- MD5
  
  23c1c9196526e4d770e0e7e923cc051a
- SHA1
  
  2453b216f47e2b9d166742332a458b88df6dd940
- SHA256
  
  25037bc7be7d6f7419e57796f62e14fd2bec084e23734fac56ae95bbb3d7e43e
- SHA512
  
  9e9d22037519368393924e3659673f81d710247604c61eead0edd16e699a50e518858154e2095b5260dd002a5eab3a932c94602d5288f6548e58540e4890cd9c
- SSDEEP
  
  192:OkJAy6Tn8T1Kbz9TkP6cqx6VDstHk2uJsTk5u:OOqUsbziXiOsAJ5u
Score

3^/10

execution
behavioral15 behavioral16
- Target
  
  wordpress/wp-admin/edit-comments.php
- Size
  
  21KB
- MD5
  
  896600d393b94add740e55edc7fdc909
- SHA1
  
  e7857037247d6ddc7c99ef43c3b00347b012ba00
- SHA256
  
  f7674cd8c20bd88e7ee485747ea6c8a5f213afbef4eca407cd6b5a8430d25b4e
- SHA512
  
  cd17a30decdcde4e2e0591a7bf56a78256b447d08095f80b587f871c0d1c1766f03c64537e513fcfae9854e61715820d3ee1a7ea7706af68245952e30304f8b8
- SSDEEP
  
  384:Kdet+6ez+gFXyNW4o5wrzVbaHBQgnlzavJ4ZZ8PRE2HQjqIZdNgsKX46wk:geMJz+gFXyNWyVbaHBQgnlzavJ4ZZ8Pn
Score

3^/10

execution
behavioral17 behavioral18
- Target
  
  wordpress/wp-admin/edit-form-advanced.php
- Size
  
  16KB
- MD5
  
  3e284ec54f174ea7fdf63658c3b598f9
- SHA1
  
  1e1dd42fcf96970f310976ac503267841c1acf57
- SHA256
  
  a62c9ac933787bee163e9e9d25a473474eb8af1610435a05122fd524c13b75c9
- SHA512
  
  160df7634480ea2586b0c68cc9876e5ee5457b5c994bff16caf37c18eeb41345761c165d1afde3c45628e027af53bb8593af2e870ccd121d73c7de007c164743
- SSDEEP
  
  384:pimwoN1eKujVlL+t3A3I43BUowWMGYP+Jd:pimwenujVlL+t3A3X3BUowWMY
Score

3^/10

execution
behavioral19 behavioral20
- Target
  
  wordpress/wp-admin/edit-form-comment.php
- Size
  
  5KB
- MD5
  
  9b172670e3553bd2a072e7199fdd3c8e
- SHA1
  
  ec53cfbc0e446bd32ba1a7b1b7c0bab7e1022eea
- SHA256
  
  acd755f451c67b6ccf378940d73c4cb529e87fe453d4dddf533ea7848858d699
- SHA512
  
  788677ecb8648a9d78d85cac7b8e58f0878eba2b477327858cc0066cecfba09d1edf86438f87a1faceb29145fb0f39626e1a053b8e6b3c48bfd206f40113eccd
- SSDEEP
  
  96:VhY2j/2qLiikjg675r4AajYIyXYJck3m4rKMMApWVgfxOjEcBq31:V62j/2riatl4AljYJck39eTmxOjEcBs1
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  wordpress/wp-admin/edit.php
- Size
  
  19KB
- MD5
  
  ebbb9f4dca0e4ea562b9b697195c74ea
- SHA1
  
  5fc135be16eccaf2c57dc0da95afb2595ab38219
- SHA256
  
  dacdc5d5fa1485407a6ea855a0c6e2b83113d434dbd1ada0b86c19eedbcefd10
- SHA512
  
  2ad5d2aa1f5beeb0c8a6c5e9ec1f7034b31e904c372bb0e109147c38a4c90b104ddf60d6a3cda48a34313b87314eefd5a9619bf3fbafdd69ffb1dd2a841e25bb
- SSDEEP
  
  192:bnmBjmFWvbyJQ+2/qoC74w0E3Y5Sgtcrx5eIsklg8Fw+UjdSy+WZ7bIv8D3Nt16a:LJKnGWeYtg7eIFlTFw+5Qa8D3ND6aiwL
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  wordpress/wp-admin/includes/class-ftp.php
- Size
  
  26KB
- MD5
  
  950dc27ed9307f8d9c6a1345f739e763
- SHA1
  
  d88cc1fdccdc5e4d2344e00b02444808041f68b7
- SHA256
  
  917d2f0475cd5cbf8cc388403f8f8c8d28f3b49bda200b976ecd2d7df9a5e364
- SHA512
  
  83fd3a9f2a17121c0e840d4ab8a17355c14dfa6b496afe4fe78264c81954a7226b0edbc2efe7912900bc381d398803b982a6b83956b695f51884824d5bb3d084
- SSDEEP
  
  768:E6qJwDhlXzMgIXGsObD5gseXAgzFb/oqW:xaKD5g5Fb/oqW
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  wordpress/wp-admin/includes/class-pclzip.php
- Size
  
  191KB
- MD5
  
  01363728c843ff93e96b6983ce38eba6
- SHA1
  
  e7caf1f66c38bb119fe709ade012a989d8610f07
- SHA256
  
  4da8c8feef62eed33ed7bf257d91627b6c5f4e58ac50ef7885d6fa6c90b6f319
- SHA512
  
  83ad412494f4d5f2aaa2169f801d1cefbe68c2b2f6d2f1d7ea855e43b80cc103be420b75ba5c15fb0e1f0e969b6606b178b180b296cafc410eb86b9304d9cccd
- SSDEEP
  
  3072:4dItMRpT6v5sll1TC6RRbxWJdZK3+EUZz55w:4dKv5slrTC6RRbxWXZK3+EUZz56
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  wordpress/wp-admin/includes/class-wp-filesystem-base.php
- Size
  
  9KB
- MD5
  
  e136b927844fea2dd33177ea9c1c3144
- SHA1
  
  b498656ae8e5796bd2cd1b74db7909809c98e87e
- SHA256
  
  91dcfff872e2c78b669e5736e56dfc99695f3c2e06e661fb9f769e521360baeb
- SHA512
  
  d2c42529efd7472cc061844cffc3c1404cfbb60f18dc37dbaa31e11ebb32aa94443bcd24905cd7a6a504a771ca437f6d0d064cf1d7bff3044d695eeae103e3cd
- SSDEEP
  
  96:FHGLRo7Lyo6LAoqLBptoptvp9kMmYjpqcSb918qupqx3lqvHuEdYJpGDq4NM/TQV:Fms0yl8z0MFHcoq1q/u2Y917Bi
Score

3^/10

execution
behavioral29 behavioral30
- Target
  
  wordpress/wp-admin/includes/class-wp-filesystem-direct.php
- Size
  
  9KB
- MD5
  
  6b4001fe8a831778279612dfbe0f80fb
- SHA1
  
  01fb9d4d34d44209addcbf87d15dee7e0eb7d74f
- SHA256
  
  a6872ab829ab4036104124770a5961f794100847e0aedbdbd5fce870a743e51c
- SHA512
  
  9a8c9b58ad6b19cf11e2aacc9796f9991c113c0d37c8a1b3845162b11a8523a0f8e4252fc96bbac167b189379de011bff4adb384d6dbd3569c24b8fc31a99148
- SSDEEP
  
  96:uxv1MtSHK5q8GS9dLCqTjqskQqIiqdXmtPbfvIgpk9XkZkE3Bfmz4zqQWj:oOtSqc3SHpCeHmpVfFlG
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32