9d3e6e991d103ced202ec1884a14e9eaf7f3fe0be9c7370bec036c9745ec106b | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ab522187ace21584bcffcd329eb7852b_JaffaCakes118
Size 2.8MB
Sample240819-reffjaybjf
SHA256 9d3e6e991d103ced202ec1884a14e9eaf7f3fe0be9c7370bec036c9745ec106b
MD5 ab522187ace21584bcffcd329eb7852b
SHA1 e6d845ff565d73d134c6a4ab4af0cd1d61a0fe96
SHA512 1580e74a942a5ccbbfc6f836ae453f1e0643f17b46e352abdebaf0112b8f1ca5b3ec26cd8e2924cb3b5abac892122f82d0d51742274d88dcb54c0719ec0423d1
SSDEEP 49152:0UE/STGbDnZAp/oMaTru9mqaWlnr3le94KOpa8+yyoglAPR3nJCPiuN+IPlIlhu:XPTgWNmTuVaf94eovfCzj
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

paypal discovery phishing

Malware Config

Targets

- Target
  ab522187ace21584bcffcd329eb7852b_JaffaCakes118
- Size 2.8MB
- SHA256 9d3e6e991d103ced202ec1884a14e9eaf7f3fe0be9c7370bec036c9745ec106b
- MD5 ab522187ace21584bcffcd329eb7852b
- SHA1 e6d845ff565d73d134c6a4ab4af0cd1d61a0fe96
- SHA512 1580e74a942a5ccbbfc6f836ae453f1e0643f17b46e352abdebaf0112b8f1ca5b3ec26cd8e2924cb3b5abac892122f82d0d51742274d88dcb54c0719ec0423d1
- SSDEEP 49152:0UE/STGbDnZAp/oMaTru9mqaWlnr3le94KOpa8+yyoglAPR3nJCPiuN+IPlIlhu:XPTgWNmTuVaf94eovfCzj
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 12KB
- SHA256 75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
- MD5 4c7d97d0786ff08b20d0e8315b5fc3cb
- SHA1 bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
- SHA512 f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
- SSDEEP 192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  JWEB.exe
- Size 28KB
- SHA256 16be3cc51fd7d6f9b7dfd52b69ff6727b68f81123bb5be8bb940863f880b0d69
- MD5 927a780c86272e577a0dea05cebcee10
- SHA1 2133691455ec6912011978e74835529bac8d25fa
- SHA512 47f40991b308c0fe1204d49e8fb41d62d8f0574f57431318f12bbb50b1a17b1653869eb7f0d3be7210a051d81937343fa1e42cb5ab84508778dd189f1b807012
- SSDEEP 768:0ImwkVD7qMbKVjc9YFAg/zLtnGzcKdtIaGH86S:07XqMbKS9GLz1G87RS
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10

discovery paypal phishing
- Detected potential entity reuse from brand paypal.
  phishing paypal
behavioral5 behavioral6
- Target
  JWEB2.exe
- Size 28KB
- SHA256 16be3cc51fd7d6f9b7dfd52b69ff6727b68f81123bb5be8bb940863f880b0d69
- MD5 927a780c86272e577a0dea05cebcee10
- SHA1 2133691455ec6912011978e74835529bac8d25fa
- SHA512 47f40991b308c0fe1204d49e8fb41d62d8f0574f57431318f12bbb50b1a17b1653869eb7f0d3be7210a051d81937343fa1e42cb5ab84508778dd189f1b807012
- SSDEEP 768:0ImwkVD7qMbKVjc9YFAg/zLtnGzcKdtIaGH86S:07XqMbKS9GLz1G87RS
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  MyABCD.exe
- Size 378KB
- SHA256 1c8520b407c5fc9bd3924919e3e7b7e10035da24b7950cf196695bcfeba7cd1b
- MD5 b9d8809dce250914cb68aaa4c3994ef5
- SHA1 443187dc82824e21aa8b88ddc362ddf96c6f76aa
- SHA512 0df6428e4fc0e2bff24faeb434f25434ec8f5f59a2bec150f1b72376f3f011bdb2cd0982b14f45f2820f1b1fe374f86d469001da698a6d7aa90a604492a91821
- SSDEEP 6144:T0/iIntSmDnCTQEjqbgtWKdC9UGy+DTPL1vMi3AYXZq/azNQXVMGhR/:T0/zSknQPmbFlXTPhvHA7azeJb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Uninstall.exe
- Size 57KB
- SHA256 e83f23d854def102dab373ffdd248e2c2ce15f9afd22dc4e3229c4f45d1abb27
- MD5 767ef316a0fb37dddd09d1164c2fc3f6
- SHA1 6c42e904bcafefc1f30db2a0ab244a8f50305b30
- SHA512 692c74dfedccbf8217786bddbc54afe3354fac6409370f3a31306d3fa5b25deabb9cc9e68c7b4bff0a28fd61524a441c7b668f178d463f45819c29aedd9e67ac
- SSDEEP 1536:9e0DnjRrJav2FnUIRr2vMYBJhqAELVigveH0+v/5QV:fD11a8YBJQAI0lwV
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral11 behavioral12
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 12KB
- SHA256 75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
- MD5 4c7d97d0786ff08b20d0e8315b5fc3cb
- SHA1 bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
- SHA512 f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
- SSDEEP 192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  lemon.swf
- Size 12B
- SHA256 7951ca54bd3da472fe0ba861ebdd900dc8d4458d5b3b5ee637f7ba40578eee7f
- MD5 b91576a4e8dcf032d6638ffb2bc2549a
- SHA1 7238c08079297c04526cc3b3f1407dba90bf2475
- SHA512 cb0b4c568345376b7cf85eabaf6946858bd4322f93e61bbea1d5f0ca033165a274938c474f925102453d65335c8c1c82ea5cf59f890c7c26ca9eb78551529311
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  save.exe
- Size 33KB
- SHA256 6de79458ec1d8767fbe4d4c6f12cf42de557249752390850073c5f9c72883420
- MD5 1239f0cc641f481c4345bf21da700551
- SHA1 2fde712c1e39f0936600748e577113a27071d6a8
- SHA512 ba03404ca1256413bbf51d2a5c09a4fe491c03bc89e76a769078effb14ae1b248915921be2b4b2c3648a732c5f390927d2486005a5e4e2c6c348430e4b015c4b
- SSDEEP 768:gdN66whCtQ7/34fLGSO9Yn0xgv4C1Wns9wTsd:Ph0QD34fLGDynEafW0d
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral17 behavioral18

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

paypaldiscoveryphishing

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18