2b03dbc5b97d644bb498e6ad01ee65312705553c77f14ee32059111d28a0b36f | Triage

Sharing

General

Target

bea28f087cc664cff82c775ecadbb34a_JaffaCakes118
Size

17.2MB
Sample

240824-p6rlrssglr
MD5

bea28f087cc664cff82c775ecadbb34a
SHA1

8ef50690e434ada6ae38b7d8a27ace46a920dc62
SHA256

2b03dbc5b97d644bb498e6ad01ee65312705553c77f14ee32059111d28a0b36f
SHA512

8479e1b9e92d9e645f0167e3b9fa2712ac3c50b3c82f67de9b4014524757b65c3c900d0148f38ef865f450f7ac22c3398dde2264dd7707a2745bfa5ffb54aa0d
SSDEEP

393216:cH/LhoV4/LtFrm1E9sr3+ESCQpZ3mnbXtVS:y/H/Lttm1E9sasQpZybX/S

Score

4^/10

discovery execution

Malware Config

Targets

- Target
  
  bea28f087cc664cff82c775ecadbb34a_JaffaCakes118
- Size
  
  17.2MB
- MD5
  
  bea28f087cc664cff82c775ecadbb34a
- SHA1
  
  8ef50690e434ada6ae38b7d8a27ace46a920dc62
- SHA256
  
  2b03dbc5b97d644bb498e6ad01ee65312705553c77f14ee32059111d28a0b36f
- SHA512
  
  8479e1b9e92d9e645f0167e3b9fa2712ac3c50b3c82f67de9b4014524757b65c3c900d0148f38ef865f450f7ac22c3398dde2264dd7707a2745bfa5ffb54aa0d
- SSDEEP
  
  393216:cH/LhoV4/LtFrm1E9sr3+ESCQpZ3mnbXtVS:y/H/Lttm1E9sasQpZybX/S
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  
  chrome/content/BitCometLauncher.exe
- Size
  
  123KB
- MD5
  
  0027e42c9c4124177641310403022ced
- SHA1
  
  78c7a57d09359b54d73f8723e6d3526ba4755a13
- SHA256
  
  deb21b68493fdce5d45019a0d5ab28d968392211244a918b8dae7e0dde491c0b
- SHA512
  
  4f399fea8fe8267dbc0f31f1b689594aebd6e255bc26eea95342bc2d09c39e27373b988ec1ec9f9c22f8551026ab53bfd77e6c0df2b503dd51b5a1e60cd644e9
- SSDEEP
  
  1536:yf5TRIgbFWG1fOIjmQRRZMLU7ovPFtI9e/Bl/1+XcF5sWjcdgrXZZtqHovUUx1:yfb/hppZZ0nF7l/1+mGgrXZZtmiUQ
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  chrome/content/bc_context_menu.js
- Size
  
  6KB
- MD5
  
  2e910dfaf60d0d2942afd4faa6a1f449
- SHA1
  
  b94502fc6d223b48ed62d4297949649be2c9b04b
- SHA256
  
  93443b287b3c77165b39d0857993c37a6a5529bc7453c1a1d2bb0c62897da3db
- SHA512
  
  aed96afb4475a63483058150ce0b83a06ac95572dae8f2edf012112c9bd6f8183681fee6f790a612335689ccf2333b2e500b6822de79f5ad6cc63ff8b7299390
- SSDEEP
  
  96:k8IQuM6HDiqQ2xBROeKx3UcqtfgzH/EPNa1igk44Hsjg5jbH:N2iZ2xB4ewkcgfgzH/Ela0gKtbH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  
  chrome/content/bc_media_capture.js
- Size
  
  37KB
- MD5
  
  fadb0f99adcdcba5d1ee779736a0df0b
- SHA1
  
  29597bb16e4737bf312a0d80bc2252f6f9f52a44
- SHA256
  
  7e86e6dcd6fc95d714bf1bbb29bc792696191a76366761112da68ad1abcc4028
- SHA512
  
  b6661bbb815a5edfbace3e4167b23ef1539b4254d2cf1ceb3e18af87d74106994a22b477310cbba3f20e3b24268c8162b2c0eae6c56942fe7dba43a35069b805
- SSDEEP
  
  768:mGEEsyDM2gK42zR4P6VriLqxrjtUo6UkMnK6qr9t+ywlp9GztvpnEfCR:mAM2gK42zKP6VricE2+
Score

3^/10

execution
behavioral7 behavioral8
- Target
  
  chrome/content/unknownContentTypeSaveAs.js
- Size
  
  6KB
- MD5
  
  d11ae9a838cf1eab53b27e7a413f61d2
- SHA1
  
  3a3d51e0986403fe376c6e834314e36839dd6bed
- SHA256
  
  cab839e8ba49cb05baaf28c8c4ca70b38386c8969c30f49eff07feb59b352591
- SHA512
  
  c0b2767bb283d6627a0a88a135a9305f4c009502a079cdc9b807d70013d159ed176b7ccc3ae93557775306812b790ca5889c0a9d25340c2a6b9c7475b171ac32
- SSDEEP
  
  96:83wlzXFzTPLMTXucyaylzJ58toB4IW9YxlyIFXl4Q:74+RN0SKoNXCQ
Score

3^/10

execution
behavioral10 behavioral9
- Target
  
  components/DownloadService.js
- Size
  
  21KB
- MD5
  
  aae26b30534c1a399853e854fd525106
- SHA1
  
  324d1747b8f50e2700d76715a1df3f5ceae2f014
- SHA256
  
  916e5e2568303a81a90c9605090951ca3b3196ea0aa93367f73c45b0e806af2f
- SHA512
  
  02f8c1215dda1bce83fb2fc983816c37abac58c304d2b118c48e9a286ef7e868b96e78203cc4ed2f7b5a4e50d35352660196e733dc8d2cab1f4e131532560cc2
- SSDEEP
  
  384:ncLLqS1UHp9WYewBf+fJkciu/10iQ5Kz1DjFfc:bp9WYeMi+5K5fFc
Score

3^/10

execution
behavioral11 behavioral12
- Target
  
  defaults/preferences/bc_context_menu.js
- Size
  
  154B
- MD5
  
  1956a40c357bb8183229d424f59e0a08
- SHA1
  
  a7e2ff03e718e3f85bcd4a15bd0558ef034ab91a
- SHA256
  
  5038ed90c9a2e9a6bf241130e6af4bdbfe812357f485c2859a52b8e34f64d71a
- SHA512
  
  bba075fb2ad79d5a80bc75bb78d97979223fa8088fe10f84b79c2dd70735ca8a84836616276d299e9b4ad4f791ac2a6b60fdc0c88c7088e5ca712cd5e51dca5a
Score

3^/10

execution
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/BcNsisHelper.dll
- Size
  
  3.0MB
- MD5
  
  84e5590cc55ac1ab85619e658c6dcd35
- SHA1
  
  870ad683fa2c7c8b6b25803f733fdc3012b28bf7
- SHA256
  
  820b5151433517814beb3fa820238c92d4f776d14e9009c78bef745b855f91e1
- SHA512
  
  3595cbb38fbe28f6f173d28f9960b753dfe42f337338fab90027b1cf0305b4a5ba85ce725cd11c550dab2511b39551d2444c89e85a1a3a37a537bee83efc971f
- SSDEEP
  
  49152:wEzL18A3D1iJiJ/beZua60rcHCprbLMprzYlTCvZo36/UuKEeESXYulMAWTN:FWA3D1iYJ/beZua60r7GprzYlTCvZoM2
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/BcNsisHelperXP.dll
- Size
  
  138KB
- MD5
  
  378ae59ffaececac8627a35b42c74147
- SHA1
  
  bcfbe797416322662c2776f96e87bf217430f557
- SHA256
  
  003efd5e26c4e0338fb11b823d424f1c499c16391961c185f5f9a9fc71e56f82
- SHA512
  
  105067a1ad250e8876715c8717fade20d79575a5c594dc1899015979cfaf4a5aa8f983acc73bbe23a953a962a1c4aa4955f2dd586aa3bb3a9d59c50d95345662
- SSDEEP
  
  3072:bjhPruBXUUxQvlfseJLtqfAg0Fuj9OMpTGpfD:nhjNUxW6AOHeD
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/BitComet_stats.exe
- Size
  
  81KB
- MD5
  
  edb96675541d0275c42096b64d794d3b
- SHA1
  
  d722c55ec62da1866a6ef81072970117b85cf290
- SHA256
  
  842df63767cacb7aedb75fb352c1505d518662e2e9dca5a297515ebdae093918
- SHA512
  
  5c7c2e848c68f6168035dbfb834d31586d0ca1abb16f220c617f9e36a87b6d4ff0a1aef03a73d5313d8962c9befb1bdf3ed2a700ee3668df948ec067e2b1d124
- SSDEEP
  
  1536:tCRIsR6gNFbzfv9i6Ix3RWCS35BrxOhG4ZcvblF:/sR9NFbzABxgCSkhG4ZcP
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  15KB
- MD5
  
  67f2ef30bc54036cf3164e76219e5864
- SHA1
  
  bf0586855ac7427b35d08909dba6a6a8d2c22e92
- SHA256
  
  c55b1140b6e5b9ed5dec99d3b10458e2966f9701895931642a8fe0c260d7f880
- SHA512
  
  1a944462453435e88c7fb4ac8beaa8ea8febbbadd83faf8549f95a3046636b3543c4e8dbed14872a1d42793b6496b797fffc7300bbce62ab0d650017ef26e98a
- SSDEEP
  
  384:EVC43tPegZ3eBaRwCPOYY7nNYXC0/Yosa:EcTgZ3eBTCmrnNAk
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/InstallOptionsEx.dll
- Size
  
  119KB
- MD5
  
  b8c7fda6ec3c8a8ead7d7eccae0b17f7
- SHA1
  
  bb1444aa3300e9ab4a7a10c7913ae5e4320b953d
- SHA256
  
  b03cedb899c8737fabb3efb1d02bb8330ee73ce667aa406a5e52a10aff180db7
- SHA512
  
  52d3ce369418c9fbc7645e8ab272199dd836ebf13fe5019694f01f1686e0708853188b5a2ba8241739620dce98765bdb4fee488189d40c37222a0230b79e6e91
- SSDEEP
  
  1536:yU+yEIWirTd+OY4M8D1fb8Li7c3bSC2RVNCSivZYrgr+9MmHZ+WIwvtu1/5bCl:b+y5TlhR8DL2d14MMmHZvtq/5bw
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/LangDLL.dll
- Size
  
  5KB
- MD5
  
  3dd80dff583544514eeb3a5ed851a519
- SHA1
  
  56f7324d9d4230c96d1963e7b3e02b05a6cf5c24
- SHA256
  
  86cff5eaca76c49f924cb123d242fdcfd45ab99c4b638d3b8f4a8cfb1970ab5b
- SHA512
  
  955f4df195b5d134449904e9020f80125cfb64d70d9482ff583451f3fcb10d15577ceac4180f71a96452d8478f6365160ab15731f9a79a494383087c9310fd1d
- SSDEEP
  
  48:S46+/p2TKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mhofjLl:zf2uPbOBtWZBV8jAWiAJCdv2CmwL
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  75ed96254fbf894e42058062b4b4f0d1
- SHA1
  
  996503f1383b49021eb3427bc28d13b5bbd11977
- SHA256
  
  a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
- SHA512
  
  58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
- SSDEEP
  
  192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  chrome/content/BitCometLauncher.exe
- Size
  
  123KB
- MD5
  
  0027e42c9c4124177641310403022ced
- SHA1
  
  78c7a57d09359b54d73f8723e6d3526ba4755a13
- SHA256
  
  deb21b68493fdce5d45019a0d5ab28d968392211244a918b8dae7e0dde491c0b
- SHA512
  
  4f399fea8fe8267dbc0f31f1b689594aebd6e255bc26eea95342bc2d09c39e27373b988ec1ec9f9c22f8551026ab53bfd77e6c0df2b503dd51b5a1e60cd644e9
- SSDEEP
  
  1536:yf5TRIgbFWG1fOIjmQRRZMLU7ovPFtI9e/Bl/1+XcF5sWjcdgrXZZtqHovUUx1:yfb/hppZZ0nF7l/1+mGgrXZZtmiUQ
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  chrome/content/bc_context_menu.js
- Size
  
  6KB
- MD5
  
  2e910dfaf60d0d2942afd4faa6a1f449
- SHA1
  
  b94502fc6d223b48ed62d4297949649be2c9b04b
- SHA256
  
  93443b287b3c77165b39d0857993c37a6a5529bc7453c1a1d2bb0c62897da3db
- SHA512
  
  aed96afb4475a63483058150ce0b83a06ac95572dae8f2edf012112c9bd6f8183681fee6f790a612335689ccf2333b2e500b6822de79f5ad6cc63ff8b7299390
- SSDEEP
  
  96:k8IQuM6HDiqQ2xBROeKx3UcqtfgzH/EPNa1igk44Hsjg5jbH:N2iZ2xB4ewkcgfgzH/Ela0gKtbH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32