fcd525afeef74c049bd69eebd13bb6d9a00088c331a00d58c625850472bdf2cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af2dfc22fe947a443b8b217b40801dec_JaffaCakes118
Size

441KB
Sample

240820-pfy8xs1dkd
MD5

af2dfc22fe947a443b8b217b40801dec
SHA1

19e0e361dc80ce3d3feb3ce14827228a18a2f81c
SHA256

fcd525afeef74c049bd69eebd13bb6d9a00088c331a00d58c625850472bdf2cf
SHA512

e01554461059bc9ac1045f8c67b133cf463583a5b6bb7db363299942bc8d8eef88e05f428b7a39c2dce7d7c08ca20b2387ef442cb8d5e5a9cb215a216f1fca56
SSDEEP

12288:M/9MeTQ7PKtQni736vn/9MeTQ3PKtQniqt5ebUJZAa+:MlMeTQ7hniAnlMeTQ3hni+HAa+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  af2dfc22fe947a443b8b217b40801dec_JaffaCakes118
- Size
  
  441KB
- MD5
  
  af2dfc22fe947a443b8b217b40801dec
- SHA1
  
  19e0e361dc80ce3d3feb3ce14827228a18a2f81c
- SHA256
  
  fcd525afeef74c049bd69eebd13bb6d9a00088c331a00d58c625850472bdf2cf
- SHA512
  
  e01554461059bc9ac1045f8c67b133cf463583a5b6bb7db363299942bc8d8eef88e05f428b7a39c2dce7d7c08ca20b2387ef442cb8d5e5a9cb215a216f1fca56
- SSDEEP
  
  12288:M/9MeTQ7PKtQni736vn/9MeTQ3PKtQniqt5ebUJZAa+:MlMeTQ7hniAnlMeTQ3hni+HAa+
Score

7^/10

discovery
- Deletes itself
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/DLLWaitForKillProgram.dll
- Size
  
  28KB
- MD5
  
  9c4b8ec42d89f7557bfd90798ce52787
- SHA1
  
  2376dde426ea65aa27c30e304086310605382475
- SHA256
  
  ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
- SHA512
  
  17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
- SSDEEP
  
  96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/DLLWebCount.dll
- Size
  
  28KB
- MD5
  
  0bdd7c6f1046ea4b42839f991ae53fb2
- SHA1
  
  cb9baefb10159b4a684fa1ee4372e7715865052d
- SHA256
  
  0a0019b2603dbc4505453c2501255ab0cc0b3c317ece4a6ce0cfb6a02a30907b
- SHA512
  
  96f41497f25d7bc81f51ab167f74243b4b767089c89c26f9752ef518fa60dedd2722c66ae87dad2334bcce1622bc12f7b9b892ae654ca58cecd9f35c9f1dc163
- SSDEEP
  
  192:OQoR7CK9FX/dVPWtJ/tXP88bSNwWW8+YdbDT:OQcWeJ/XPWtJxPFYi8nb
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  eef9e469e8a30717974499f277d97e2a
- SHA1
  
  2d33c25984ebd9116beeb55cdde4c5c86c023e5d
- SHA256
  
  1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
- SHA512
  
  d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
- SSDEEP
  
  192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  36KB
- MD5
  
  6958016193a066833556992077bad4fe
- SHA1
  
  5f564945936f99381d7e2408f034f97d069005a4
- SHA256
  
  f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
- SHA512
  
  fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
- SSDEEP
  
  384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/SelfDelete.dll
- Size
  
  24KB
- MD5
  
  7bf1bd7661385621c7908e36958f582e
- SHA1
  
  43242d7731c097e95fb96753c8262609ff929410
- SHA256
  
  c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e
- SHA512
  
  8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f
- SSDEEP
  
  96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/chkver.dll
- Size
  
  32KB
- MD5
  
  9a1b5bb01a920c1dda2d47e28b7cdcad
- SHA1
  
  b97bfbe228d91a47cd975ac9a8025226540de16e
- SHA256
  
  36ff0d49c77b71dbd56441f3efa80139ede6382ee19808011e0869ecbd37f7c2
- SHA512
  
  212d5980a9833f001c8447bc48a59b5f5f4515efa3de319cee069121d8732c1d8e03a46b6b58d020ba73335f5b0c92db4a37d9d53b5d2713842175e0a2214cd1
- SSDEEP
  
  384:lgRNQYL3d8UyZnmlRrNcorSBHcGf0yXHrELcePokpWIP:lCNQYL9VBBrSB8mXHrEDokpH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  DBGOLottoT.exe
- Size
  
  212KB
- MD5
  
  53eb66dc59ce5a43435549151fa53864
- SHA1
  
  311fbb8976c37f0fd76f613f7510875cad4cc1dd
- SHA256
  
  13decbcbac9401d685b23cc453c5168a7493b46d9de125686796db45fb20e28c
- SHA512
  
  ff9475c50c78caa1ae2e24c5f6995694d0f1e2bb09ee8c102f83732a1d353b277de4df8d079b6304a2eed6f615adccdcd956cb49715854314bf1983cef06267c
- SSDEEP
  
  1536:mgJEk4zeZv8Y9vip+1WmNO8nf1lU2zai:mgJEzJ6qp+1WmNOy3
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  Uninstall.exe
- Size
  
  256KB
- MD5
  
  cc8bbb498850a64564b736005447bc58
- SHA1
  
  904a4e1bff51eb912d0ee8f5edbcda7d9f9ae893
- SHA256
  
  ad2e02486e216e128e861f3d690217a73b1a43dd72e722723b42ca301910f652
- SHA512
  
  fd96cd186e568f96db5e952977c3e60c3f6218afc19b85e58a53742fb214e3dd142824e57f222dfe1583482d94cfd75b1c4f6c4272219209ac9e79a2c9cd88e9
- SSDEEP
  
  6144:Ke34g0MDYxkkn/9GreTQ0HCjD48vKtQjDPaGBxO6rFpIr2UBjdKwEUXZgrOsqYLG:C/9MeTQ7PKtQniN6TIrhZdrEUJx
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/DLLWaitForKillProgram.dll
- Size
  
  28KB
- MD5
  
  9c4b8ec42d89f7557bfd90798ce52787
- SHA1
  
  2376dde426ea65aa27c30e304086310605382475
- SHA256
  
  ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
- SHA512
  
  17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
- SSDEEP
  
  96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/DLLWebCount.dll
- Size
  
  28KB
- MD5
  
  0bdd7c6f1046ea4b42839f991ae53fb2
- SHA1
  
  cb9baefb10159b4a684fa1ee4372e7715865052d
- SHA256
  
  0a0019b2603dbc4505453c2501255ab0cc0b3c317ece4a6ce0cfb6a02a30907b
- SHA512
  
  96f41497f25d7bc81f51ab167f74243b4b767089c89c26f9752ef518fa60dedd2722c66ae87dad2334bcce1622bc12f7b9b892ae654ca58cecd9f35c9f1dc163
- SSDEEP
  
  192:OQoR7CK9FX/dVPWtJ/tXP88bSNwWW8+YdbDT:OQcWeJ/XPWtJxPFYi8nb
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/GetSid.dll
- Size
  
  88KB
- MD5
  
  dd376c8a1d2bebf54cb9833478ae3d8e
- SHA1
  
  2556bd9b20cd686f81fbc6f1a0a112c92bde0b2e
- SHA256
  
  a0792b8c391273743f74ebb56e641ec23ee74ee902788bd8be89c0b1787a7148
- SHA512
  
  7b7ec5454f00920105fe2f56906cff83f03aca41f4e9eec6ce8be399243c272f4d12015e6474beed8e60a24ed8f8384b95e5af4f4caacb3ae14dc3f1f280b158
- SSDEEP
  
  1536:vSOU6kCTsubV3Y7v5QeF+S8x+z1wf8oqaZGX/Ofcr:vfkAB3wlop+z1VoqaZwOfA
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  eef9e469e8a30717974499f277d97e2a
- SHA1
  
  2d33c25984ebd9116beeb55cdde4c5c86c023e5d
- SHA256
  
  1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
- SHA512
  
  d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
- SSDEEP
  
  192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  36KB
- MD5
  
  6958016193a066833556992077bad4fe
- SHA1
  
  5f564945936f99381d7e2408f034f97d069005a4
- SHA256
  
  f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
- SHA512
  
  fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
- SSDEEP
  
  384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/SetHoldData.dll
- Size
  
  96KB
- MD5
  
  e86d36c5332858061cc519e7bb558f39
- SHA1
  
  8114e43152797296ec1919b1c713ebada661ca51
- SHA256
  
  4c8869ff8cbdd2f9a6a2d2876194869664d0e3f554886451224ff4e732136365
- SHA512
  
  46bf19a71fe2ae4d61084bcf406604e2f375c92f5de1a5e9a6eb857424eb4dc82e70ae7099aa3676c518960f78a17dafa05c23e5283954e43f44190391662ed1
- SSDEEP
  
  1536:WLWIcTAacVyVg+h1hT9Uh+uQNIIhVQoJadWytgYT+j:4TlCg+h1xr9IIh+oJadrb
Score

3^/10

discovery
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30