91a7b4a18099aa6cb75f2ebe9180199f2168c78d9d8a2465fedb5dfa95af0543 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a147e2c007f5fcff007d1e88c79293b8_JaffaCakes118
Size

2.6MB
Sample

240817-fm56da1fpl
MD5

a147e2c007f5fcff007d1e88c79293b8
SHA1

4b8439f7147dd7675e39f7acd9eb1f3ca17aff38
SHA256

91a7b4a18099aa6cb75f2ebe9180199f2168c78d9d8a2465fedb5dfa95af0543
SHA512

30e77863ce91e726c0a315c9f3ca8bd7b07444ec0e32f2f6317fc3a37aeaf9a1ab6f47cb5677d0cd2f2543307667a78a2fcf1097bea1a47c98f5de902b242312
SSDEEP

49152:M3VGY8yeniBTWcoIKo6VkRZUGvCrbmfn8o7ltA+MBV9uQrvbG4o3rpl4omWxKSpQ:PY8JIKIK1lGvTUQVMBVo0Sepb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  a147e2c007f5fcff007d1e88c79293b8_JaffaCakes118
- Size
  
  2.6MB
- MD5
  
  a147e2c007f5fcff007d1e88c79293b8
- SHA1
  
  4b8439f7147dd7675e39f7acd9eb1f3ca17aff38
- SHA256
  
  91a7b4a18099aa6cb75f2ebe9180199f2168c78d9d8a2465fedb5dfa95af0543
- SHA512
  
  30e77863ce91e726c0a315c9f3ca8bd7b07444ec0e32f2f6317fc3a37aeaf9a1ab6f47cb5677d0cd2f2543307667a78a2fcf1097bea1a47c98f5de902b242312
- SSDEEP
  
  49152:M3VGY8yeniBTWcoIKo6VkRZUGvCrbmfn8o7ltA+MBV9uQrvbG4o3rpl4omWxKSpQ:PY8JIKIK1lGvTUQVMBVo0Sepb
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  325b008aec81e5aaa57096f05d4212b5
- SHA1
  
  27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA256
  
  c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- SHA512
  
  18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP
  
  192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/US-EU.exe
- Size
  
  1.7MB
- MD5
  
  969cc2683ee8717fe34f3e199cda02ec
- SHA1
  
  f5710c3b4da0ea90f07358fb47d31b022039ed76
- SHA256
  
  9794f1b472f1063129ed04470f91ca1d537ae259defedce6d59e14430892bbe9
- SHA512
  
  02a88bd16e2ae9ab8dec375e9fc502ffc22afaa5e22fea0208f112c4013c4bed196275cf361c341742b88a4e280a60ed989d72d1454e39c8f1fe587ec25bd3a2
- SSDEEP
  
  49152:J6Xg1VT6siA55QRZrkhH9UKCLuK9jGn5JYobSqU:iWT6siw5ughdlu9j65aoU
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  c10e04dd4ad4277d5adc951bb331c777
- SHA1
  
  b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
- SHA256
  
  e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
- SHA512
  
  853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
- SSDEEP
  
  96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/nsExec.dll
- Size
  
  6KB
- MD5
  
  acc2b699edfea5bf5aae45aba3a41e96
- SHA1
  
  d2accf4d494e43ceb2cff69abe4dd17147d29cc2
- SHA256
  
  168a974eaa3f588d759db3f47c1a9fdc3494ba1fa1a73a84e5e3b2a4d58abd7e
- SHA512
  
  e29ea10ada98c71a18273b04f44f385b120d4e8473e441ce5748cfa44a23648814f2656f429b85440157988c88de776c6ac008dc38bf09cbb746c230a46c69fe
- SSDEEP
  
  96:M7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgNk32E:eKgfwgcr8zylsB49Ud0qJVgNX
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/nsisFirewall.dll
- Size
  
  8KB
- MD5
  
  69f2e8c6fd141e9e720b2c4c366a8154
- SHA1
  
  a6279d93a102b6d7608dced32a36ddcd3e51994c
- SHA256
  
  2e204ee4f1d12b4ca35c8205cea0cabe354f2e79a471863cfb76a7cee83cf107
- SHA512
  
  bf23a5f3ce98e6a1c04fe8ae6b6f385483ceed62470cd109017c97f37c23adbf0203bfb43d09b007c6925aeb5da9617f33bc5c478618f00cc91da83a48cacaf2
- SSDEEP
  
  96:KCQjg8aCpUcmloiwmXaYY8NVxIYn69TEdUc1ND0RrXQAcuAtoFrJxalMu2k:KCQPeip58NjMNWND0RrXYuAWkM
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/nsisURLPlugin.dll
- Size
  
  3KB
- MD5
  
  18d60cb1080687e878e2bb42193c7bb6
- SHA1
  
  918becbd85d6162f5591cc9326991bfdcc500fca
- SHA256
  
  1d7e7b74b5f6b9aefe782edccd9a0bffe23ca3f882f355a38aa43ac3759ff970
- SHA512
  
  1c5fa94728f84b4833685423572633c8ad99b816b5098b17484aa3044918e5f1bb3e817bcd37d546f7faceaf211a76f1bd0f537e12ca2f7954e32c62ef1cf705
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  TorrentEasy.exe
- Size
  
  2.5MB
- MD5
  
  e0f1cebd8778d024465eff63ac4bf68e
- SHA1
  
  c847cdf69754c43c929da18f3ba4f865be08b304
- SHA256
  
  31660f9fbf508189f92366abee90631c4b382419c69a65c155b4ed8a469d07d8
- SHA512
  
  7bc6c794c309bb5bb7e5cb0566b59408d6ccb88ebbb765e303c2f2a165edc773bd8e16201af112aa6af7aef0f3683d1725840bae87806da9283ea94226116693
- SSDEEP
  
  49152:+WJ+qK0+1jkhgx0oOn6MGlUCaR/VaWQiCDUrrq4SMk2T67pn9nG6mtvI+/l:eqK0+r09/VaWPCMrq4SMw9nG
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  Uninstall.exe
- Size
  
  65KB
- MD5
  
  683bdb649ff0e2fd104f1ce70c173a88
- SHA1
  
  2db7ec60ee9b4a4e0613ff1c6df9fdf130671c1e
- SHA256
  
  0e061eb1437ac58d5cc8aa662e341039ce24aac7f1a3c73c2777b7ef6b90db31
- SHA512
  
  5553eec83509cfb1dfdc59854a5fa9a7d148fda7966cce3121efa8f1c0ab6056f59d3f55779e6206fcf54768fed5bd5d821b696c0b0e298a5ff2093864e6b37a
- SSDEEP
  
  1536:qQpQ5EP0ijnRTXJ7glm2TTnKLeAyNxuNSScBFg3Ur96Q:qQIURTXJ7Z2TWeAxtUV
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  325b008aec81e5aaa57096f05d4212b5
- SHA1
  
  27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA256
  
  c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- SHA512
  
  18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP
  
  192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/nsisFirewall.dll
- Size
  
  8KB
- MD5
  
  69f2e8c6fd141e9e720b2c4c366a8154
- SHA1
  
  a6279d93a102b6d7608dced32a36ddcd3e51994c
- SHA256
  
  2e204ee4f1d12b4ca35c8205cea0cabe354f2e79a471863cfb76a7cee83cf107
- SHA512
  
  bf23a5f3ce98e6a1c04fe8ae6b6f385483ceed62470cd109017c97f37c23adbf0203bfb43d09b007c6925aeb5da9617f33bc5c478618f00cc91da83a48cacaf2
- SSDEEP
  
  96:KCQjg8aCpUcmloiwmXaYY8NVxIYn69TEdUc1ND0RrXQAcuAtoFrJxalMu2k:KCQPeip58NjMNWND0RrXYuAWkM
Score

3^/10

discovery
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24