186761a11648dd53507440f3c9f045fbaf507a460f3696650e2496dae208dba0 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
bec1352ddf847b05f0938ba334e797ef_JaffaCakes118
Size 4.3MB
Sample240824-rfmk8stcrb
SHA256 186761a11648dd53507440f3c9f045fbaf507a460f3696650e2496dae208dba0
MD5 bec1352ddf847b05f0938ba334e797ef
SHA1 65f0d51d47619d7e2a2590f591535f70bb7aecb2
SHA512 44c4cb906558ac0da7db08ec92ff7dbe1a075cad65c3ee7409fe2957949ff1006078b94b547eaf3811998a8e4ac2d622fadff3e3bb24ce81ae6cfc2a4ef09012
SSDEEP 98304:TuJmYdNeRQRkbYUnhs/qhgs9kSZhJyI4fOVPoB:Tu44eikbY4u/qhgFSZmOqB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Targets

- Target
  bec1352ddf847b05f0938ba334e797ef_JaffaCakes118
- Size 4.3MB
- SHA256 186761a11648dd53507440f3c9f045fbaf507a460f3696650e2496dae208dba0
- MD5 bec1352ddf847b05f0938ba334e797ef
- SHA1 65f0d51d47619d7e2a2590f591535f70bb7aecb2
- SHA512 44c4cb906558ac0da7db08ec92ff7dbe1a075cad65c3ee7409fe2957949ff1006078b94b547eaf3811998a8e4ac2d622fadff3e3bb24ce81ae6cfc2a4ef09012
- SSDEEP 98304:TuJmYdNeRQRkbYUnhs/qhgs9kSZhJyI4fOVPoB:Tu44eikbY4u/qhgFSZmOqB
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/AnticareMsg.dll
- Size 40KB
- SHA256 e84362455ac00ade7f45c58485533d3a7cebf5bb0fa1d4081b6e375ec1e7f788
- MD5 0ab8dd4d754ee97df55dfefbc0836627
- SHA1 c5a2065ca4750c3246d96e2f740387faaad70c3e
- SHA512 2a83535f31c1dc5f861d6d7cbe78a92684b91653df1260b78cfc7bbc54c2c9448a491083d5b9b4ffd03cbc057217c4bd8e0e989a4a3a992bad2cc838bd0d18ba
- SSDEEP 384:aP4rbSlT57iuBjR6cC7Xx4r7ruc8/l3jyuhSvr1OWuf+cA/8oPdZO:HyTBiufqx4r2RjrSz1OWj/8oS
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/ChkClient.dll
- Size 140KB
- SHA256 5bdefe9a081e5e2f4af73891db6228a6b57e7dd320fac0ae233f5cd741db8a1f
- MD5 3fe47e461bb686693cf440c8815f2a0b
- SHA1 9a7d27d47a542b83d00f1e6027ba4c22d496f887
- SHA512 687c57e17c4f527b90e8eafa9929fa9ee0a1fa82b2c9ba9c6a6385cfcb1fcdd1e09305acbf357cf61e7dd7e061d581a378d2661ed7df7dbfd554514f04646e61
- SSDEEP 1536:Ic+9HlMqT+GbwVG7MPHFdufRxYj3fnN8smruI6qlCMQwIZ7:ITM9VBPHFsrOPN70bHlcwG7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/DLLWaitForKillProgram.dll
- Size 28KB
- SHA256 ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
- MD5 9c4b8ec42d89f7557bfd90798ce52787
- SHA1 2376dde426ea65aa27c30e304086310605382475
- SHA512 17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
- SSDEEP 96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/DLLWebCount_new.dll
- Size 28KB
- SHA256 5417af0fc8284e9745650a55803bb34217e314096dc7cedf113c960624ae08ad
- MD5 f16f5feebd9b431a8bc63456c0ad267c
- SHA1 acc75cfa3ed7888334aa2ccf305a6c6c58a08aaf
- SHA512 ed1e62d903b511a29abd5def4419b5afa63699ee2d1c91a9d884ffb01d7debe5981559574cac4885140d1f27f4275be56236f5c6f1c327147dcac8893f965512
- SSDEEP 96:3YP18J49uJPeaFX/0gOtJ/9nMjbnbk2Zl1bU6i9vtmAuSBudGaTA:3f1bFX/rOtJ/lMvbfJU6snpYdb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/IEFunctions.dll
- Size 3KB
- SHA256 3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a
- MD5 9701818d39318145dd164794ef3a3846
- SHA1 7db701f8dc19163d46ba88e8b68d8dbf428a8152
- SHA512 d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
- MD5 eef9e469e8a30717974499f277d97e2a
- SHA1 2d33c25984ebd9116beeb55cdde4c5c86c023e5d
- SHA512 d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
- SSDEEP 192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/IsVista.dll
- Size 44KB
- SHA256 17bb3331e2300aa01666fbee98b9552cec5e46212a4c5a340c0370b93df88f83
- MD5 344d13fd0fdd2d97e8d61960f40a8a30
- SHA1 3f0f120203005eea3e8ed1652a6ea8a607ea934d
- SHA512 b4e49c58503532e270cc369f1cbd14d85edd46da5ab034dad730bd4297887dd541d445d2fbf205820e6afbbdba7ab6d5b78b694467554320fd6db8e06fe4f719
- SSDEEP 384:x4MHyTfkIbqaddF1qabhJfl7Tisz7c7t3TyAvdjWu875USXdvlHZYklIsg:FSTpbqaLfHJflCszOTbdjWR3Nvl
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/Ischeck.dll
- Size 120KB
- SHA256 544f3c2c03f7900539d4868437f8e08204c0b4c79357af666a1fb48d406c1ffd
- MD5 6c1f65ce96712e05f64c7a26b7adee36
- SHA1 6cea6c2618fb31902c52cb1d5fad04503bd34ed0
- SHA512 5244d26d013dc2c7083bd4c167cac99307985babcabc1806a898a2621fce6b73d256b21d549bce8744f3221a51017ea5f621d2f6f5cd5aae83ec21ae41e5d5a6
- SSDEEP 1536:1ki0RcSLEMxwjoTolPh9zyZFTEPmayYgH+t7Q0LtJhpdcOoyoJaZGUttW:IA/VHeZCP3ybHLK3hpdcO1oJaZttW
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/KillProcDLL.dll
- Size 36KB
- SHA256 f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
- MD5 6958016193a066833556992077bad4fe
- SHA1 5f564945936f99381d7e2408f034f97d069005a4
- SHA512 fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
- SSDEEP 384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $PLUGINSDIR/SelfDelete.dll
- Size 24KB
- SHA256 c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e
- MD5 7bf1bd7661385621c7908e36958f582e
- SHA1 43242d7731c097e95fb96753c8262609ff929410
- SHA512 8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f
- SSDEEP 96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  $PLUGINSDIR/UserMgr.dll
- Size 55KB
- SHA256 955705c8c7188d06af16849e5cc3ceae79ea5d0808cc2851630a54d54bbc01f2
- MD5 130f66c0161e6da46744abe3c0be4d9c
- SHA1 d2a44a0cd07bc0c5d81fc0d056d6d45d200896ed
- SHA512 915b9135da230ec8d3016ba83bd7102b3f8cb13050189a176f8d4d50363f13584fb971226458bc493cd2df27723c8ab7273effab7d6c6e14d49e735d24d7fac8
- SSDEEP 768:fThBSJtwQegACHpCygw5eKeK/B/viiTRvTkujLWf2UEHzDSZA7yM5jt/BJE4lV:7SCQeLCHpCyNV9ZTRbkuOQzyMVt/blV
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 80b2740fb3a21ffab022a96ce6b420019072f8ef3a048fd9dea4a5b64498c0c8
- MD5 cdff6b8f9523b6ef9f20fb5f9e90f1a5
- SHA1 b25f6e0a19b41ff0a12de8e98e3005bc119d34fa
- SHA512 62585c6a6103aed10f9a79c016df8cb630c3e37715542b5f26aa1a910771540c9b323ddbba3329db0ecf524143f7a27b782e198ce944317f764be6b9d04b792e
- SSDEEP 96:W7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3trCUTMxVXw32E:IKgfwgcr8zylsB49lrCUTMxVX7
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  $PLUGINSDIR/processes_second.dll
- Size 140KB
- SHA256 8fe4dad8f894bcdb9a83a9d302907de404695be4b50e619afd88f09d72583e69
- MD5 f0a1eae66dd2f54fbe26c26db5493a6f
- SHA1 46d56b4c6694da1ec4d88b0a5b153dad02b5dca7
- SHA512 e1b3c946e90fc30b6cdf953c8c7e96121b462bf8529099e0587f7f243b9d73eeba52b510dd2598937f188f7a35bc1e3785b7589ec6c249996a5795c10dafd1e7
- SSDEEP 3072:F+WSoWifAbFBgChOQcNg3kirQDNgv3gp9Ibzls8:iAAbFBgChOzNgUrDNgvgp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  $PLUGINSDIR/stack.dll
- Size 10KB
- SHA256 46b4a72ae8590b0afb3304cc5c13db0502bc4c4cb02f64f37c79008c17db814f
- MD5 0f61a81a543822de5fcb9a8a43f230dd
- SHA1 d01d4a0f542f3c654637fdfe5a574fe1f150ece1
- SHA512 596b7a897ba64c32e26ba6168aa3628aad37b187a9814a286298307d8c42eabf8e8a679dbda558f8b2cdc8676c94ec819256432aa5ad7c05a5387759262a4402
- SSDEEP 192:VBEc/BwQV5gTRk6uIu8uQubQuNu3fufuXuPDyuSuFujournu6udkuUuw0y9UrVo:VBEwBZmx97TSefeC/zIqoInvEkJ8y9x
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  $PLUGINSDIR/xml.dll
- Size 118KB
- SHA256 e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845
- MD5 42df1fbaa87567adf2b4050805a1a545
- SHA1 b892a6efbb39b7144248e0c0d79e53da474a9373
- SHA512 4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d
- SSDEEP 1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32