e1e69f5eb3d6533bb0444e04c8cf2f2866606c2a1072b2a1231ced158d397c28

Sharing

Copy URL

Twitter E-mail

General

Target

9e6ce2f2bb792773a63174608af650e6_JaffaCakes118
Size

3.0MB
Sample

240816-p2cbaazapm
MD5

9e6ce2f2bb792773a63174608af650e6
SHA1

ee2cd53f658c610aaa0c67c363448f8182f530a2
SHA256

e1e69f5eb3d6533bb0444e04c8cf2f2866606c2a1072b2a1231ced158d397c28
SHA512

8b65f17aea99eaa3a7ef83b8773e017f6c5082ca9d642ebc3da5dfc990a30447d0c8eb0a0af4f0cb5e432691329cb8fdba4680d1fd438841b0c4f5b9fbae16dc
SSDEEP

49152:gd1Px3WPeLBC99GK2EMFAz3qB2/b5OR9/qi6jjfU+VmqNhaypYawkHIWKPJWP:yxWPeLjKHeo/gRwi6cYuyouHK4P

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  9e6ce2f2bb792773a63174608af650e6_JaffaCakes118
- Size
  
  3.0MB
- MD5
  
  9e6ce2f2bb792773a63174608af650e6
- SHA1
  
  ee2cd53f658c610aaa0c67c363448f8182f530a2
- SHA256
  
  e1e69f5eb3d6533bb0444e04c8cf2f2866606c2a1072b2a1231ced158d397c28
- SHA512
  
  8b65f17aea99eaa3a7ef83b8773e017f6c5082ca9d642ebc3da5dfc990a30447d0c8eb0a0af4f0cb5e432691329cb8fdba4680d1fd438841b0c4f5b9fbae16dc
- SSDEEP
  
  49152:gd1Px3WPeLBC99GK2EMFAz3qB2/b5OR9/qi6jjfU+VmqNhaypYawkHIWKPJWP:yxWPeLjKHeo/gRwi6cYuyouHK4P
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  
  $APPDATA/seemao/config/Common.dll
- Size
  
  143KB
- MD5
  
  8ba8f8d6ed4db7976c4f1aadf0b0ca88
- SHA1
  
  1e82e56af2bfd37ee91a795f36fefc7a2a50cf9b
- SHA256
  
  27479ff989fa49cedc4fa80b3733f44df3630b621211235ac10706276b398322
- SHA512
  
  10c57d7db153489e3c0b3e2e6c7edd7d364b7e9b9400922e1febd6310aa2a1313ccb18b1b845fe20adb808a89d24a8a721c09f63f753688c33df608f48e31f73
- SSDEEP
  
  3072:6VJlz8zb9QyxIkXtzZ5oW4vDYQNiPbNac:6VJxqb9XDt56D0Pboc
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $APPDATA/seemao/config/Seemao_blank.html
- Size
  
  7KB
- MD5
  
  8af864c7116d77ad668ea8b370a6262d
- SHA1
  
  e03249924296ba60b7959c205f4952b9361fb7f4
- SHA256
  
  a026e139bfbbafa2781ee152b889095e29db9ceded0fdcc70f26b112d6299cff
- SHA512
  
  b1151c3d93004e4e1796135472a31e378ac7154cedf1cb093c89cf5c3f543daa84552b7fd005664ea275ce0d9efa06445a872aba4195e8385ca170be9896025b
- SSDEEP
  
  96:pI2OkRe20XGknAQIRI9TM2qjFIWYwbOG4FUzJujEw9Vzw5Q7F/b9:pI25f0X3AQIRI9TbHo4TEwPw5Q7F/b9
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $APPDATA/seemao/config/blank.html
- Size
  
  8KB
- MD5
  
  513ebdf12e2177e6542217ab03525223
- SHA1
  
  1d104c7be69390da9cf2080dbcc04ba1e6992b8c
- SHA256
  
  558d6027fb5afd5dfd4188b7cf74499f980331ae888a73b39d6790f83115619d
- SHA512
  
  b37f9f598f12699dd19abadf6ebffa53f9561cee358fe6e77bcb797cbed60609064231627384646025b87a946456a1024feaf153a111b07d4fdbe54f281e5219
- SSDEEP
  
  192:pI22Qq8LneLC4c/f6234LiBPdlduM6m+qHVRWLbgbaEKwwI8o:pIC34LiBFjJ6eHVRWLbgbafwh8o
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $APPDATA/seemao/config/map/index.html.html
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $APPDATA/seemao/config/map/www.360buy.com.html
- Size
  
  2B
- MD5
  
  9b35dd1fd8fb2e8ba4a972122aca50b4
- SHA1
  
  3e7f8dfde6fdfbe8ac9722e701cef405a9236330
- SHA256
  
  eef2eae2699d81c58d176a9a58d4bf183df2acb6844b9eebf1cc60ae460ec50d
- SHA512
  
  dc7fb0400a439e7de8f851e28c48951459483089398ce3be6596f0abb8545f27b0b35eb901e9a3ccb7177e70fbb19276d4f885258089e8b4ddfa2e10facc3c1d
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $APPDATA/seemao/config/map/www.3dbuy.com.cn.html
- Size
  
  1B
- MD5
  
  c9f0f895fb98ab9159f51fd0297e236d
- SHA1
  
  fe5dbbcea5ce7e2988b8c69bcfdfde8904aabc1f
- SHA256
  
  2c624232cdd221771294dfbb310aca000a0df6ac8b66b696d90ef06fdefb64a3
- SHA512
  
  bc23b8b01772d2dd67efb8fe1a5e6bd0f44b97c36101be6cc09f253b53e68d67a22e4643068dfd1341980134ea57570acf65e306e4d96cef4d560384894c88a4
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $APPDATA/seemao/config/map/www.7cv.com.html
- Size
  
  2B
- MD5
  
  54cafa3a6d69c189cf2df3978fbdd435
- SHA1
  
  ab34955f0a30619fc4faa49013902031d85ddc46
- SHA256
  
  e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- SHA512
  
  43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $APPDATA/seemao/config/map/www.99kaoshi.com.html
- Size
  
  1B
- MD5
  
  c81e728d9d4c2f636f067f89cc14862c
- SHA1
  
  da4b9237bacccdf19c0760cab7aec4a8359010b0
- SHA256
  
  d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
- SHA512
  
  40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  $APPDATA/seemao/config/map/www.99read.com.html
- Size
  
  2B
- MD5
  
  54cafa3a6d69c189cf2df3978fbdd435
- SHA1
  
  ab34955f0a30619fc4faa49013902031d85ddc46
- SHA256
  
  e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- SHA512
  
  43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $APPDATA/seemao/config/map/www.amazon.cn.html
- Size
  
  3B
- MD5
  
  9e73f8411a70e1bceefc15ac312a362b
- SHA1
  
  21c4340e3a66a7bc00e5805bc1ebe30d3f2e218e
- SHA256
  
  c69684c471706da34b39b2994be39294926dc543e51aea5f4ce0f06091a00ebd
- SHA512
  
  59bb8b649fad3c2c990881eeb177ca0a751eb64b57b111da5300e5025753c9f642297d8c71b0b9ac0712f33af31a853d6174c1648f56ccadc66cf23e4130f538
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $APPDATA/seemao/config/map/www.bgccbook.com.html
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  $APPDATA/seemao/config/map/www.china-pub.com.html
- Size
  
  3B
- MD5
  
  37705de0752d1027f8fc3b3f390c448d
- SHA1
  
  b9a36fe59d4092c1e8363b6dbb80c4325170ebb9
- SHA256
  
  b8d52dc3f650996a66e32d4fd4f40129f6d5f742a20893615fe1b8dbedac6039
- SHA512
  
  affe90e227dd7fed7ac0d9dfcd7a01dda8d7abb454e23a4d98fd7c1c4f8f38bcc7f6062cb52cbca3ac7088ee55900a5b85810e2d258b6896528d8cac87dd4709
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $APPDATA/seemao/config/map/www.dangdang.com.html
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  $APPDATA/seemao/config/map/www.dazhe.cn.html
- Size
  
  1B
- MD5
  
  c4ca4238a0b923820dcc509a6f75849b
- SHA1
  
  356a192b7913b04c54574d18c28d46e6395428ab
- SHA256
  
  6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- SHA512
  
  4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  $APPDATA/seemao/config/map/www.huachu.com.cn.html
- Size
  
  2B
- MD5
  
  54cafa3a6d69c189cf2df3978fbdd435
- SHA1
  
  ab34955f0a30619fc4faa49013902031d85ddc46
- SHA256
  
  e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- SHA512
  
  43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Adds Run key to start application

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32