fc003bb2618b0c117db26fa79463bf8da54dbb81a6d697d9d4e14fea142321ed | Triage

Sharing

General

Target

bc7cd7ace67c89092500d40495c6e610_JaffaCakes118
Size

4.4MB
Sample

240823-t14flaxfnl
MD5

bc7cd7ace67c89092500d40495c6e610
SHA1

c6c951bd9eafec5bb70538f68540f342f68aa42e
SHA256

fc003bb2618b0c117db26fa79463bf8da54dbb81a6d697d9d4e14fea142321ed
SHA512

d6c38e9f6ccbe762a0d57ab4efc4f3da4ee2c20530f61d2f20e8c35ba4d968d855070b087b6704bc1f5ac7c97ccceb5ffab7c6146ce93b7766285908b24ec130
SSDEEP

98304:Q9EwBc9tGZv3oQvDoPlKmyQ9PFVBZTiUCRZOO:qE0c9sf+KNQ9P6fZOO

Score

3^/10

discovery

Malware Config

Targets

- Target
  
  bc7cd7ace67c89092500d40495c6e610_JaffaCakes118
- Size
  
  4.4MB
- MD5
  
  bc7cd7ace67c89092500d40495c6e610
- SHA1
  
  c6c951bd9eafec5bb70538f68540f342f68aa42e
- SHA256
  
  fc003bb2618b0c117db26fa79463bf8da54dbb81a6d697d9d4e14fea142321ed
- SHA512
  
  d6c38e9f6ccbe762a0d57ab4efc4f3da4ee2c20530f61d2f20e8c35ba4d968d855070b087b6704bc1f5ac7c97ccceb5ffab7c6146ce93b7766285908b24ec130
- SSDEEP
  
  98304:Q9EwBc9tGZv3oQvDoPlKmyQ9PFVBZTiUCRZOO:qE0c9sf+KNQ9P6fZOO
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/ExecCmd.dll
- Size
  
  4KB
- MD5
  
  b9380b0bea8854fd9f93cc1fda0dfeac
- SHA1
  
  edb8d58074e098f7b5f0d158abedc7fc53638618
- SHA256
  
  1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
- SHA512
  
  45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
- SSDEEP
  
  48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/ExecDos.dll
- Size
  
  5KB
- MD5
  
  a7cd6206240484c8436c66afb12bdfbf
- SHA1
  
  0bb3e24a7eb0a9e5a8eae06b1c6e7551a7ec9919
- SHA256
  
  69ac56d2fdf3c71b766d3cc49b33b36f1287cc2503310811017467dfcb455926
- SHA512
  
  b9ee7803301e50a8ec20ab3f87eb9e509ea24d11a69e90005f30c1666acc4ed0a208bd56e372e2e5c6a6d901d45f04a12427303d74761983593d10b344c79904
- SSDEEP
  
  48:6jOBtU/BXN8kUByyy/Aklkcrkyg7Vg5RibGoTCTo0gqVeeaeQqzM5rv774YRljmB:y/DMy4ncrkyg7tbpQFLUEYRxe
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/FindProcDLL.dll
- Size
  
  31KB
- MD5
  
  83cd62eab980e3d64c131799608c8371
- SHA1
  
  5b57a6842a154997e31fab573c5754b358f5dd1c
- SHA256
  
  a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294
- SHA512
  
  91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9
- SSDEEP
  
  384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  12KB
- MD5
  
  1d5c649dde35003a618b9679d5d71b92
- SHA1
  
  0409bbab3ab34f8c01289cdd847b4d1a32d05b18
- SHA256
  
  0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f
- SHA512
  
  b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9
- SSDEEP
  
  384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  32KB
- MD5
  
  83142eac84475f4ca889c73f10d9c179
- SHA1
  
  dbe43c0de8ef881466bd74861b2e5b17598b5ce8
- SHA256
  
  ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
- SHA512
  
  1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
- SSDEEP
  
  384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  12KB
- MD5
  
  a10c9c9f5474ed8c13ff5e182655eb9f
- SHA1
  
  ffa6073f6b1724183d570c368c3025430de1ee33
- SHA256
  
  17055e463a04435bdb5fea5d634af12a4678ff5d680196da230879ad24622ee3
- SHA512
  
  bd7222d4ee6516b9be7f498858812ebfa824f657ef5298cfc813ad91fdfb6129642232d4c47f2edc4c2b8d2619ba7530a5195d53e9017435e7e8ef742f60fdb5
- SSDEEP
  
  192:ATPN9E1B0OUrW7VymsS9WmaYqkzJqa5Maamy6J0WVpzuzzPzrR2Z+:ATzEbUrW9tWmaY/zJ+aFy6CWVUzDP8
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/StartMenu.dll
- Size
  
  6KB
- MD5
  
  5aae8598d8b53bcec81d8e8c8a6732f9
- SHA1
  
  d071fcc74a107c7d7bc5a493d305b00976b07464
- SHA256
  
  be3f03c07be54354b8a9a30a8c0ac384f43c245c9b95ed1025549c76642f3fb4
- SHA512
  
  d20af152b9d1903cd9cd0ff584f14f95ee69cd7149c9ef9369257d08659d1a7ab5860055b39ebd0ead67cfc31da2571175623a5676116ce999acea2b7a643c1d
- SSDEEP
  
  96:VLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsBQhEfP0:VLjPk8OT30FFAmCP0
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  10KB
- MD5
  
  4eff5fafd746f5decb93a44e3a3d570c
- SHA1
  
  a11aa7681b7e2df1c7f7492a127d332d1495ea8a
- SHA256
  
  cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
- SHA512
  
  cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
- SSDEEP
  
  192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/md5dll.dll
- Size
  
  8KB
- MD5
  
  a7d710e78711d5ab90e4792763241754
- SHA1
  
  f31cecd926c5d497aba163a17b75975ec34beb13
- SHA256
  
  9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2
- SHA512
  
  f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0
- SSDEEP
  
  96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $SYSDIR/CoreAAC.ax
- Size
  
  592KB
- MD5
  
  6636fd123e77073c1a07d1ec0831334c
- SHA1
  
  39ea6f28d5b30675760f29df68160a81d5df349e
- SHA256
  
  e85c1802ae3c7af9b7967ceadaf0504823f092abba04ba912576edbfd421e76a
- SHA512
  
  3ac59d1ad36eb1c052c272a11c6dd78dbebb5061b8b79a2a1f0108f8208be7fb9cc8e6208124b12c779e2bdc845882cfd432a84427e2c5c312c4d3275b054849
- SSDEEP
  
  12288:8rXUXLyZqsQoK2AyPaGJuVpk+v9LybKslc9OyGs2+eD:SUX4K2kGJMpkwLyllA7l2
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $TEMP/Dump.dll
- Size
  
  172KB
- MD5
  
  859737636bc7a4f0332a6cc6f0fee978
- SHA1
  
  620e86d7e9b408733a65ed5b53b04af49c3d9d68
- SHA256
  
  a01a479dbe7323b439b9cace4586f4caa60a367a264f6d298bde84c0654a6e9f
- SHA512
  
  c4f5b08184fe3d6f233bad8fbf36403ecc75a80aa92fbf495c99ea7a1d0cd02a1c2f3e2affeafd148ae101c40a2eb1d3eab5a6beafc0c570b05da5fa6589abaf
- SSDEEP
  
  3072:GsgbRiRlO4hFa804cZN0HaV3cjrfaeHVx00uzy5CUeU:Bgb4O4hF24cZiHAcjrfdGt0
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  $TEMP/getmacaddress.dll
- Size
  
  224KB
- MD5
  
  2e546196d65baa49989d64f57f3ba990
- SHA1
  
  e6ee44af14487e668242cbb97fdc4bdf63fbd670
- SHA256
  
  fa7681a9877e6ee1c14615279f86323b205333e2937376717cc4ce97cd6399c1
- SHA512
  
  8c10f096b1c17ddbad084ecf8fcad1a1d7aed6adece8e362ba6bb62c66d23c6a2390aea99219428e49b3b87e2550bd9ffe0752ad4d4d0c7388dbd28995d15081
- SSDEEP
  
  3072:PdzXol2bd4eclQSBV6fRfvnl/OVnTTFbRP19k+uwl+2JIN2Jcq9C5GFKw:PdzXo45Jnl/ORTTFbpHWzLNmcU
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $TEMP/xml2fspdata.exe
- Size
  
  124KB
- MD5
  
  174db01920fc8b493ee6668d854f0726
- SHA1
  
  2e4368c1b4715dce7455e31738a5b76b1b070f50
- SHA256
  
  ac7b0bc4635c24f07d64da94451309b12229db326e0fac8612558de695003291
- SHA512
  
  bad21688cb4c6789ddec6e129188e42c545ccfd9c9861279998ebf3c3fd5ec3e22e9c0465b9f25d7c357ed8d4a38ec5d1024bd6ff38adbaeedb67b39c1fdb5c4
- SSDEEP
  
  1536:W2aGwaba+SxEJM9lg4hKNFgroLpvBzrhbWpia76PuApfuY3E65uZH9:W2aGwabaHr9lg4gpLpDbVTKY3T5uZ9
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  CrashReport.exe
- Size
  
  176KB
- MD5
  
  16508a7499ddd769777ab7a14322cc38
- SHA1
  
  a0660b1ef8bbbf595aead0030e075699e920aff7
- SHA256
  
  c246f010069fdb30966e4573cc6113e7b851c9096892775510960ea7ef85f37a
- SHA512
  
  949833b6a5096d502639f01bfd509e12b71100d34ff1fffdb06767c9c33520b34a834f5a54df0f45d207482f55264b905f284c54f8316a2a4c7acae788bf3160
- SSDEEP
  
  3072:XBqOrbmvmJ9BW7YcnXk3TBfjpcJs53/1EkxC:XEOrivmxW75U3TBrpcJ6XC
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  Dump.dll
- Size
  
  172KB
- MD5
  
  859737636bc7a4f0332a6cc6f0fee978
- SHA1
  
  620e86d7e9b408733a65ed5b53b04af49c3d9d68
- SHA256
  
  a01a479dbe7323b439b9cace4586f4caa60a367a264f6d298bde84c0654a6e9f
- SHA512
  
  c4f5b08184fe3d6f233bad8fbf36403ecc75a80aa92fbf495c99ea7a1d0cd02a1c2f3e2affeafd148ae101c40a2eb1d3eab5a6beafc0c570b05da5fa6589abaf
- SSDEEP
  
  3072:GsgbRiRlO4hFa804cZN0HaV3cjrfaeHVx00uzy5CUeU:Bgb4O4hF24cZiHAcjrfdGt0
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32