2f422c485651c99de8be09caea9e2c58deae5001ad893ec215df138fc62e9def

Sharing

Copy URL

Twitter E-mail

General

Target

a78a5562d0369294194eae3df3159d1f_JaffaCakes118
Size

2.1MB
Sample

240818-vw1dtavcrd
MD5

a78a5562d0369294194eae3df3159d1f
SHA1

4b32f957955f7c82942ce5e7607c99383a795063
SHA256

2f422c485651c99de8be09caea9e2c58deae5001ad893ec215df138fc62e9def
SHA512

f93ea6253c7469ce410c8d84602cbff774506c851c0b9b8ff6e60c2140a9f610950c1edb6e257967b5a99a8bbbdb0c7720898e588d92ac0e15fe769c12191a95
SSDEEP

49152:Mw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFcyXaKXN2YRqHCCUUr4+cYf5:MhXaKrqiscYPZ

Score

7^/10

Malware Config

Targets

- Target
  
  a78a5562d0369294194eae3df3159d1f_JaffaCakes118
- Size
  
  2.1MB
- MD5
  
  a78a5562d0369294194eae3df3159d1f
- SHA1
  
  4b32f957955f7c82942ce5e7607c99383a795063
- SHA256
  
  2f422c485651c99de8be09caea9e2c58deae5001ad893ec215df138fc62e9def
- SHA512
  
  f93ea6253c7469ce410c8d84602cbff774506c851c0b9b8ff6e60c2140a9f610950c1edb6e257967b5a99a8bbbdb0c7720898e588d92ac0e15fe769c12191a95
- SSDEEP
  
  49152:Mw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFcyXaKXN2YRqHCCUUr4+cYf5:MhXaKrqiscYPZ
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  32KB
- MD5
  
  83142eac84475f4ca889c73f10d9c179
- SHA1
  
  dbe43c0de8ef881466bd74861b2e5b17598b5ce8
- SHA256
  
  ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
- SHA512
  
  1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
- SSDEEP
  
  384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  00a0194c20ee912257df53bfe258ee4a
- SHA1
  
  d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA256
  
  dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- SHA512
  
  3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  ab73c0c2a23f913eabdc4cb24b75cbad
- SHA1
  
  6569d2863d54c88dcf57c843fc310f6d9571a41e
- SHA256
  
  3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457
- SHA512
  
  99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8
- SSDEEP
  
  96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/nsWebJPDesk.dll
- Size
  
  303KB
- MD5
  
  064c5337ed2c6f123f5270d7dcec2a40
- SHA1
  
  51efbdc6f795510b84f6c0e3b9796f8720a55983
- SHA256
  
  e73b9d938fcccf600d3fa743965b7190f376c830091b05f828b052d1f439d389
- SHA512
  
  5c840dfcc346ddc1a4de2ada1ea311cf1ab049866ce9bcf02c9d20422a92f521e35413323d818393ba0b452499c394eadc39a94200afd35cd6fb1e143e11bd7f
- SSDEEP
  
  3072:Y5gYOFiiBz0yPYx2yXk+5OqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5A:dFDBYyo2yXOqdKcS0Hwjl2JwK
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $TEMP/UpdateInfo.exe
- Size
  
  39KB
- MD5
  
  d533ded81d112b6f56d6de58b2f0aa17
- SHA1
  
  6835c84301bff161816276df73801c598068da40
- SHA256
  
  216b65cc457ed6854a669557ca10242058dfd90f47e9d6c1b86c40eb871ddd26
- SHA512
  
  bef4e0139c96bb0c2fe9f229137763f86c566e80448a57f269ec55d5600c71faf5d533c78a453ed2a9effe80e668b074b6c2c09d2ba96b70e09e038243776328
- SSDEEP
  
  768:MIaE1Neh3lNKox9msfg7uNOwSvHa0TvVdZwbqLDb7uJwgaJhpGTY0:Z/1NBoxks47360TvVdi0DfAwgC+V
Score

1^/10
behavioral11 behavioral12
- Target
  
  Update/jpborder.exe
- Size
  
  627KB
- MD5
  
  7d19e6f730bcf70547ee1f3d3942de33
- SHA1
  
  49508ab3ec07b4fa8cd258d503226690efb77854
- SHA256
  
  61cce76a8e47bb8df52c60e19ff3a0db36aeb76cc5cedcdf18aaf2e44424f917
- SHA512
  
  d49f040e1be08c30b812e773b7bcafda6ee18265a8c9de5619ea5fff69b52d7e48975e1e87d6037c64faf108d77e97e4b1aeae69d526111432d8ed153bd3e06d
- SSDEEP
  
  12288:221BH+uQMNqcWnbzEQs534nn3TQG0+ClAVaDwIspv51SDDFpZh5zKxoEYlLqfI:2QBjNebzEQsIjN0/psFSFpZ3LFLSI
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  
  jpdesk.exe
- Size
  
  903KB
- MD5
  
  fd11f6fe68c6a543576fd06e9258b359
- SHA1
  
  df92e8b8f6e1e16f00667387f249c1f6b9cc8892
- SHA256
  
  a5e2d6c7db54bc2e15ff5b7bd0f0bf4c416b842fdd2a609e5d85b67b9650c686
- SHA512
  
  4480373c91cc23174c08852cdbabbb0cca10b938c9c1ae73dae775bf83dd8977f65fc54955fe593dc32bede246002c310d32bad33a21c183c212ff0092ff6c2d
- SSDEEP
  
  24576:+oAXT+u1Ngb1FPQgfqIRknfKtefSTpME2ZRh4r:+H6uWMmqfSTGEmL4r
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral15 behavioral16

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

UPX packed file

UPX packed file

Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16