59169b84b9d6377940558811ad4cf17c57af00f50d76046d66fddda470703c32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd8d6585fa90c961aeabcb0b56d7b34e_JaffaCakes118
Size

1.0MB
Sample

240823-3cz8pstajf
MD5

bd8d6585fa90c961aeabcb0b56d7b34e
SHA1

40f31ef27bb13b535868f8e56272729db111b5d6
SHA256

59169b84b9d6377940558811ad4cf17c57af00f50d76046d66fddda470703c32
SHA512

1ce5616f2352abc42357c5f6e3701df534207a78c3ec5140c45f5bb925a1a7bd6daa001d5fac6782c54f9f578a058c4cef1e2c89a23961429dc937abc52dd23a
SSDEEP

24576:uw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFRTLaaYOCi6Bj7M5J9ydy2h0:uw1dILPAX8ln6aB4WP3E29V8S4Dhg0fg

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  bd8d6585fa90c961aeabcb0b56d7b34e_JaffaCakes118
- Size
  
  1.0MB
- MD5
  
  bd8d6585fa90c961aeabcb0b56d7b34e
- SHA1
  
  40f31ef27bb13b535868f8e56272729db111b5d6
- SHA256
  
  59169b84b9d6377940558811ad4cf17c57af00f50d76046d66fddda470703c32
- SHA512
  
  1ce5616f2352abc42357c5f6e3701df534207a78c3ec5140c45f5bb925a1a7bd6daa001d5fac6782c54f9f578a058c4cef1e2c89a23961429dc937abc52dd23a
- SSDEEP
  
  24576:uw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFRTLaaYOCi6Bj7M5J9ydy2h0:uw1dILPAX8ln6aB4WP3E29V8S4Dhg0fg
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  00a0194c20ee912257df53bfe258ee4a
- SHA1
  
  d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA256
  
  dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- SHA512
  
  3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  ab73c0c2a23f913eabdc4cb24b75cbad
- SHA1
  
  6569d2863d54c88dcf57c843fc310f6d9571a41e
- SHA256
  
  3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457
- SHA512
  
  99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8
- SSDEEP
  
  96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/nsWebJPDesk.dll
- Size
  
  300KB
- MD5
  
  d7945b9e9ec6598060ef3b9f93be3f02
- SHA1
  
  b36a25ad5a631c77050b908c261c1cafb28f0b06
- SHA256
  
  b13a84dfb4a801a89a97f3eab6edeb3a47cbb5fa6d104503ce714a9f20ed69f9
- SHA512
  
  de0af351675c702f9db825b69bc8bd4ddcb9ac5e61deca98e0acdc7b7ec32b6d7a751dff1969816d9ad3efafc818641b679089f25d81d56120d3e603a0b6d0f9
- SSDEEP
  
  3072:3L2pPD6npPU86KtvrySRqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5:3LEPDWphtTRqdKcS0Hwjl2Jw
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  jpdesk.exe.tmp
- Size
  
  851KB
- MD5
  
  390d0b24025393b6d19e788ecc14e374
- SHA1
  
  2b6705fd35d751a5e24d092903dbd6de53d13a42
- SHA256
  
  b3852f3b5fe203166b4e1cc8399788b28a6de122e1cdc2bca106865902e77422
- SHA512
  
  f531c53b2aa0fe368cad4fb2dbe44b8e07d7e4d0e0f186d2edc4c606547d33b4009f211565d16d46f65650cf6d5d82f3a8c8aad1c747dc0dd5b822dcbccfbd3e
- SSDEEP
  
  12288:csA0imoBqk2BnzlGkVFOdNAg7jWoGem4wbNok6rsxDK2TfptuUgjYD/Ug4JrkE6k:4qx5zpeEgPweaZJxuOgjYTUg4xkuJi41
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral10 behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10