fd37bbba7671d0620e521c605de9765cab9f9bf031b2a5e507ec67cd174e3068 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
c0aaf1e29a4db05ffca7c108020083ab_JaffaCakes118
Size 8.8MB
Sample240825-ntdnpssdrf
SHA256 fd37bbba7671d0620e521c605de9765cab9f9bf031b2a5e507ec67cd174e3068
MD5 c0aaf1e29a4db05ffca7c108020083ab
SHA1 33bd6b8297336c6d37bef0d4a8586f9986bcc335
SHA512 7465a6bdd7978bb6ce41afcced2ab738709f144ae40710b29a6f3b987525a41dd3bc9cc79cd1d3ff5b2116e7a75fd4bf931e291432814a215f0c6e4510fe5f9b
SSDEEP 196608:7y+KRgm/XijxwVfbbiaufpAGTVMMkmSPYtiY03Vk4T69Rb9u1luQz/:u+KRzKjcbWhSAtiY0+aAI1lP
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Targets

- Target
  c0aaf1e29a4db05ffca7c108020083ab_JaffaCakes118
- Size 8.8MB
- SHA256 fd37bbba7671d0620e521c605de9765cab9f9bf031b2a5e507ec67cd174e3068
- MD5 c0aaf1e29a4db05ffca7c108020083ab
- SHA1 33bd6b8297336c6d37bef0d4a8586f9986bcc335
- SHA512 7465a6bdd7978bb6ce41afcced2ab738709f144ae40710b29a6f3b987525a41dd3bc9cc79cd1d3ff5b2116e7a75fd4bf931e291432814a215f0c6e4510fe5f9b
- SSDEEP 196608:7y+KRgm/XijxwVfbbiaufpAGTVMMkmSPYtiY03Vk4T69Rb9u1luQz/:u+KRzKjcbWhSAtiY0+aAI1lP
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 12KB
- SHA256 75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
- MD5 4c7d97d0786ff08b20d0e8315b5fc3cb
- SHA1 bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
- SHA512 f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
- SSDEEP 192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 6KB
- SHA256 4f945ad53b7aa8ed516b2f58c2ed9f15c13bbdf0e489d71c7347b80583cee5fd
- MD5 388c408cff35a38d04e3cda18f63af07
- SHA1 9c2aa2ed8b526ace4267acbcf5648b2601019ac4
- SHA512 542292d61ff209f6c98c62ebad549024611a7d42fb951f8cc211b886f0d202d5e0da3b754c84c8a00043c748ed527351fc524357412cf88875e6bf729cbba46f
- SSDEEP 96:MFJsQxcnqakqeStS6+NMKQwECv0nGhFZxTxZ05hU/61:C9xcnqakCN+N9n0na1K5y61
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 9KB
- SHA256 4eb689e2db8d683afcfffe6dee1985fbd458d2770093547331d563acece80c67
- MD5 e085476805e8f5ef1c7ed635c5309017
- SHA1 609e79fdc29d6dee40cc5dd333094db5f9f63eec
- SHA512 082932aea8d993de8ca1eeb60f7bb4e56cc7eab4a683c59822b2c544223febab5915bb2b7c2e2dad79472bbd8ad400770dd7c1f112cef24d18ebd0f1ad63fe9f
- SSDEEP 96:DomrrPB3x4gJcp7/qzt1SGr3DEkJjUFezthPhwrWNHRW5j5/Y0+YAZIhtyPEM75C:nnTEjwT3XgFshpwrlR5/7AZlTpVHlmV
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 25c4f65b02eca4ad897d7a623b3ca1290bac836e98ab5ee5f6c527dfb6a41dd7
- MD5 419d642fe3436fda8bb22eea9c37a6ca
- SHA1 c1644131b880c6e03f14de3c79efd27093a77908
- SHA512 29df088e3b5189efd6fbeebc2f23c5850303d40fe5331cd336bb852d986f9ab66f7bcd963ebf8c4e4eea7d49a6590027490d651a3e4781024c7983a2c456a337
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  aminstall.dll
- Size 124KB
- SHA256 a5240dd109c8721f3d8b0279375dff0044c5461cf68306eae9267fa122f0caf1
- MD5 2ec42398e55da7ef94b72261b9a598ea
- SHA1 ebb8ea2af408b985117930b214b3ac9fb9bfb27c
- SHA512 c5532c8f7628c56f2aebd311261202b3764d1a04111dc90040de9711f7df49dfc71fd9b674b1d9251052bafec0b6dff9f9b49ec79fa2fb484fda7891905edb77
- SSDEEP 3072:N5ejXjok9otaxPAWe3TBfywbl0UjpXwtep6+BR:N4jMk9ot0AWe3TBJeUSMR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral11 behavioral12

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12