23ef4926e0d3e77b38fd3cdc0e7c24d95ae29b1bb296d24e18d5650fc0e27386 | Triage

Sharing

General

Target

95d7253a90be8968e9e315859156bb1b_JaffaCakes118
Size

145KB
Sample

240814-m7jw7syejb
MD5

95d7253a90be8968e9e315859156bb1b
SHA1

5ffa242378c5be246135a9fe679d49ebbd3bb24f
SHA256

23ef4926e0d3e77b38fd3cdc0e7c24d95ae29b1bb296d24e18d5650fc0e27386
SHA512

ec06ee85d821ebe95d696cbbbe971125e8ede8d31298f9e0d766168a0bc548ac4767f155edecd389266b14fe9d1f662721873636b8dd58a0c6756de982fa2e30
SSDEEP

3072:Kp8l05FyX0mpa4ZJJc5JUDgS6Ob3OGXIyjLeigj8vp0+1rlw3eI:KCl05Yc8aUrN6GXIki3ovp0+FS3eI

Score

3^/10

discovery

Malware Config

Targets

- Target
  
  95d7253a90be8968e9e315859156bb1b_JaffaCakes118
- Size
  
  145KB
- MD5
  
  95d7253a90be8968e9e315859156bb1b
- SHA1
  
  5ffa242378c5be246135a9fe679d49ebbd3bb24f
- SHA256
  
  23ef4926e0d3e77b38fd3cdc0e7c24d95ae29b1bb296d24e18d5650fc0e27386
- SHA512
  
  ec06ee85d821ebe95d696cbbbe971125e8ede8d31298f9e0d766168a0bc548ac4767f155edecd389266b14fe9d1f662721873636b8dd58a0c6756de982fa2e30
- SSDEEP
  
  3072:Kp8l05FyX0mpa4ZJJc5JUDgS6Ob3OGXIyjLeigj8vp0+1rlw3eI:KCl05Yc8aUrN6GXIki3ovp0+FS3eI
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  $APPDATA/Internat Exp1orer.qnk
- Size
  
  1KB
- MD5
  
  9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1
  
  39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA256
  
  6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- SHA512
  
  eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $DESKTOP/Internat Exp1orer.qnk
- Size
  
  1KB
- MD5
  
  9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1
  
  39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA256
  
  6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- SHA512
  
  eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $DESKTOP/ԱմƷ.qnk
- Size
  
  1KB
- MD5
  
  3801cf5240ef322de5fb53224f763068
- SHA1
  
  e4286f9b6e5986b6a237bc70fdc03e8a36287e11
- SHA256
  
  23dde6d591dc39c8b7901a49ce2edbe1591ef2b68d69700a4c81fd741f2d714e
- SHA512
  
  3d26058c20050e236cb78533485dc2dd02ed6be0ab7037e8eac5916b75abe189d38f57ed45899787cbe69318ec4d6763633d1a8a96600fd0b20b83aaa9f03ef4
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $FAVORITES/Ա.lnk
- Size
  
  1KB
- MD5
  
  62d588bdb74e4e2e5d1689fa9272ce39
- SHA1
  
  9d0db515d8f65e57353381d707060f7343a74da7
- SHA256
  
  248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- SHA512
  
  cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  107737e3282fefd85684f2fa3df6d1c3
- SHA1
  
  3befbcae116a644ae28cebdc1d7dfe6be5c8ca5f
- SHA256
  
  21042be362d4073053bffcc90511b3ecf77902243525b56bb159581b5ece43a0
- SHA512
  
  439ac2f3066902e08d63dc3061f55063089857e765feb29fe47ba5819a9bebdff3fe2fe55fc8bfcfddb729d340f006ee95b5aa4422d712f9dcc07cc02ec410b4
- SSDEEP
  
  192:FTmFxiXTQdQbg9FkGuz9lBDpO5DwbgUojcA96lK72dwF7dBG0N1:FTmriEdYQFkGUlI6vojj6l+BGE
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  10KB
- MD5
  
  0ae9c427fe7bbbbf1368c1c6d3933ae7
- SHA1
  
  c8e5131613302531c88512dada29a18886259268
- SHA256
  
  49437f4b9fd38007f3b2735f0a8a12830b995305c75118b440202980183d5c6a
- SHA512
  
  59b76b00f2b0d6242dc5bc3cb36d3ff78867445f502e34cea890c6f493c2adf9b97cec539963204ddd1c641e1a77139f46fc33dec4dc636f4b06d2edffffec6d
- SSDEEP
  
  96:vCCshwlpqUsYghN/9uvZ7CLWNCSiiVTQYBGVXRvuBDlSriklbuba1iLc+cEyzo7e:BzqUuh/uLCXIkYBGV9uVlSblbubbwtl
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $SMPROGRAMS/Internat Exp1orer.qnk
- Size
  
  1KB
- MD5
  
  9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1
  
  39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA256
  
  6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- SHA512
  
  eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $SMPROGRAMS/Ա.lnk
- Size
  
  1KB
- MD5
  
  62d588bdb74e4e2e5d1689fa9272ce39
- SHA1
  
  9d0db515d8f65e57353381d707060f7343a74da7
- SHA256
  
  248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- SHA512
  
  cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  $STARTMENU/Internat Exp1orer.qnk
- Size
  
  1KB
- MD5
  
  9ffaab5f197ee38cf1fe65e19d4bb217
- SHA1
  
  39ee57d785cb31b75fe79879ab5dfed14eb1a28e
- SHA256
  
  6a1bfc7b4d0b3c749f9a5737f7f0253c634bdd62fe812948807c6beae039ecca
- SHA512
  
  eaa04c6437eac713912a81b2e11f97cfdc38d5d5bb459d7f4ae94d140b2bd4d74685cda43697f00b6803b1b58da3bef78ca3d9d6a4b9f5e4278ff2451aee512b
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $STARTMENU/Ա.lnk
- Size
  
  1KB
- MD5
  
  62d588bdb74e4e2e5d1689fa9272ce39
- SHA1
  
  9d0db515d8f65e57353381d707060f7343a74da7
- SHA256
  
  248402dd02a096f9721d61fe867fac5cacf4dc9001fa2aa6a50a59f7405606ef
- SHA512
  
  cbb47f7e4227177ad39a1c914e00e0ca13209fe0839d13819299ad203572b69026c541d71c5101e4cdddbcf7786c6adf339af3e4b0aab65cb188614f646a893e
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $TEMP/remote.exe
- Size
  
  56KB
- MD5
  
  376e54addc7940acb06d2a7cecf1a676
- SHA1
  
  82459c49512e6d13146f1e6934ad7da6c0f00acf
- SHA256
  
  f1910180af52b7c42bb7e2bdef91b89f9ea38d86a5b0447a6f60cee3f585264f
- SHA512
  
  d54b2205bf7f2061856e8e07b73a0182d89b3bf51e515fedda9b7119b9f19906520ecce25f30240cb8a6270142caf34bfc372fab61338b3947ee61d23ca0b1cb
- SSDEEP
  
  1536:Mppv5CNE2E/n/fn8lvOvNOH4KJJ6CR4Romu/BsKO5:Mppv5CNEhf8FH4KJJ6045y+
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24