e1e69f5eb3d6533bb0444e04c8cf2f2866606c2a1072b2a1231ced158d397c28

Sharing

Copy URL Twitter E-mail

General

Target
9e6ce2f2bb792773a63174608af650e6_JaffaCakes118
Size 3.0MB
Sample240816-p2cbaazapm
SHA256 e1e69f5eb3d6533bb0444e04c8cf2f2866606c2a1072b2a1231ced158d397c28
MD5 9e6ce2f2bb792773a63174608af650e6
SHA1 ee2cd53f658c610aaa0c67c363448f8182f530a2
SHA512 8b65f17aea99eaa3a7ef83b8773e017f6c5082ca9d642ebc3da5dfc990a30447d0c8eb0a0af4f0cb5e432691329cb8fdba4680d1fd438841b0c4f5b9fbae16dc
SSDEEP 49152:gd1Px3WPeLBC99GK2EMFAz3qB2/b5OR9/qi6jjfU+VmqNhaypYawkHIWKPJWP:yxWPeLjKHeo/gRwi6cYuyouHK4P
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  9e6ce2f2bb792773a63174608af650e6_JaffaCakes118
- Size 3.0MB
- SHA256 e1e69f5eb3d6533bb0444e04c8cf2f2866606c2a1072b2a1231ced158d397c28
- MD5 9e6ce2f2bb792773a63174608af650e6
- SHA1 ee2cd53f658c610aaa0c67c363448f8182f530a2
- SHA512 8b65f17aea99eaa3a7ef83b8773e017f6c5082ca9d642ebc3da5dfc990a30447d0c8eb0a0af4f0cb5e432691329cb8fdba4680d1fd438841b0c4f5b9fbae16dc
- SSDEEP 49152:gd1Px3WPeLBC99GK2EMFAz3qB2/b5OR9/qi6jjfU+VmqNhaypYawkHIWKPJWP:yxWPeLjKHeo/gRwi6cYuyouHK4P
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $APPDATA/seemao/config/Common.dll
- Size 143KB
- SHA256 27479ff989fa49cedc4fa80b3733f44df3630b621211235ac10706276b398322
- MD5 8ba8f8d6ed4db7976c4f1aadf0b0ca88
- SHA1 1e82e56af2bfd37ee91a795f36fefc7a2a50cf9b
- SHA512 10c57d7db153489e3c0b3e2e6c7edd7d364b7e9b9400922e1febd6310aa2a1313ccb18b1b845fe20adb808a89d24a8a721c09f63f753688c33df608f48e31f73
- SSDEEP 3072:6VJlz8zb9QyxIkXtzZ5oW4vDYQNiPbNac:6VJxqb9XDt56D0Pboc
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $APPDATA/seemao/config/Seemao_blank.html
- Size 7KB
- SHA256 a026e139bfbbafa2781ee152b889095e29db9ceded0fdcc70f26b112d6299cff
- MD5 8af864c7116d77ad668ea8b370a6262d
- SHA1 e03249924296ba60b7959c205f4952b9361fb7f4
- SHA512 b1151c3d93004e4e1796135472a31e378ac7154cedf1cb093c89cf5c3f543daa84552b7fd005664ea275ce0d9efa06445a872aba4195e8385ca170be9896025b
- SSDEEP 96:pI2OkRe20XGknAQIRI9TM2qjFIWYwbOG4FUzJujEw9Vzw5Q7F/b9:pI25f0X3AQIRI9TbHo4TEwPw5Q7F/b9
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $APPDATA/seemao/config/blank.html
- Size 8KB
- SHA256 558d6027fb5afd5dfd4188b7cf74499f980331ae888a73b39d6790f83115619d
- MD5 513ebdf12e2177e6542217ab03525223
- SHA1 1d104c7be69390da9cf2080dbcc04ba1e6992b8c
- SHA512 b37f9f598f12699dd19abadf6ebffa53f9561cee358fe6e77bcb797cbed60609064231627384646025b87a946456a1024feaf153a111b07d4fdbe54f281e5219
- SSDEEP 192:pI22Qq8LneLC4c/f6234LiBPdlduM6m+qHVRWLbgbaEKwwI8o:pIC34LiBFjJ6eHVRWLbgbafwh8o
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $APPDATA/seemao/config/map/index.html.html
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $APPDATA/seemao/config/map/www.360buy.com.html
- Size 2B
- SHA256 eef2eae2699d81c58d176a9a58d4bf183df2acb6844b9eebf1cc60ae460ec50d
- MD5 9b35dd1fd8fb2e8ba4a972122aca50b4
- SHA1 3e7f8dfde6fdfbe8ac9722e701cef405a9236330
- SHA512 dc7fb0400a439e7de8f851e28c48951459483089398ce3be6596f0abb8545f27b0b35eb901e9a3ccb7177e70fbb19276d4f885258089e8b4ddfa2e10facc3c1d
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $APPDATA/seemao/config/map/www.3dbuy.com.cn.html
- Size 1B
- SHA256 2c624232cdd221771294dfbb310aca000a0df6ac8b66b696d90ef06fdefb64a3
- MD5 c9f0f895fb98ab9159f51fd0297e236d
- SHA1 fe5dbbcea5ce7e2988b8c69bcfdfde8904aabc1f
- SHA512 bc23b8b01772d2dd67efb8fe1a5e6bd0f44b97c36101be6cc09f253b53e68d67a22e4643068dfd1341980134ea57570acf65e306e4d96cef4d560384894c88a4
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $APPDATA/seemao/config/map/www.7cv.com.html
- Size 2B
- SHA256 e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- MD5 54cafa3a6d69c189cf2df3978fbdd435
- SHA1 ab34955f0a30619fc4faa49013902031d85ddc46
- SHA512 43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $APPDATA/seemao/config/map/www.99kaoshi.com.html
- Size 1B
- SHA256 d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35
- MD5 c81e728d9d4c2f636f067f89cc14862c
- SHA1 da4b9237bacccdf19c0760cab7aec4a8359010b0
- SHA512 40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $APPDATA/seemao/config/map/www.99read.com.html
- Size 2B
- SHA256 e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- MD5 54cafa3a6d69c189cf2df3978fbdd435
- SHA1 ab34955f0a30619fc4faa49013902031d85ddc46
- SHA512 43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $APPDATA/seemao/config/map/www.amazon.cn.html
- Size 3B
- SHA256 c69684c471706da34b39b2994be39294926dc543e51aea5f4ce0f06091a00ebd
- MD5 9e73f8411a70e1bceefc15ac312a362b
- SHA1 21c4340e3a66a7bc00e5805bc1ebe30d3f2e218e
- SHA512 59bb8b649fad3c2c990881eeb177ca0a751eb64b57b111da5300e5025753c9f642297d8c71b0b9ac0712f33af31a853d6174c1648f56ccadc66cf23e4130f538
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  $APPDATA/seemao/config/map/www.bgccbook.com.html
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $APPDATA/seemao/config/map/www.china-pub.com.html
- Size 3B
- SHA256 b8d52dc3f650996a66e32d4fd4f40129f6d5f742a20893615fe1b8dbedac6039
- MD5 37705de0752d1027f8fc3b3f390c448d
- SHA1 b9a36fe59d4092c1e8363b6dbb80c4325170ebb9
- SHA512 affe90e227dd7fed7ac0d9dfcd7a01dda8d7abb454e23a4d98fd7c1c4f8f38bcc7f6062cb52cbca3ac7088ee55900a5b85810e2d258b6896528d8cac87dd4709
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  $APPDATA/seemao/config/map/www.dangdang.com.html
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  $APPDATA/seemao/config/map/www.dazhe.cn.html
- Size 1B
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  $APPDATA/seemao/config/map/www.huachu.com.cn.html
- Size 2B
- SHA256 e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7
- MD5 54cafa3a6d69c189cf2df3978fbdd435
- SHA1 ab34955f0a30619fc4faa49013902031d85ddc46
- SHA512 43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Adds Run key to start application

Checks installed software on the system

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32