Extracted

• • Target
    c0af2afcc9026372a7c8ad9b5680bf97_JaffaCakes118
  • Size 1.3MB
  • SHA256 3ba359e9ba12a39ccaafcfea174272ea350210f712501e32ddd2f511d7ef9dbd
  • MD5 c0af2afcc9026372a7c8ad9b5680bf97
  • SHA1 97b9311a195a8c2d6e8a691302fb5178d82b0472
  • SHA512 b6c0064cc1039c7e66fa20340ab73b6af7fc58bed2c1668626dd6053e13cb070b87032b3a4b0ef6a72af5dff126f3eedf445e5c9adc384337f937a8f34d77836
  • SSDEEP 24576:K4fjH0QmYhg4IJAlDk5dRFrp4FlkQ6HdeGJr8dE2zVs0Et1Sn+etcSlDa7ZwCtHz:TjH0pYhg4IoD0RWKQ69JvyG0k1Ocws
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  sendsafeunregisteredbotnetdiscoveryspam

  • SendSafe

    SendSafe is a notorious spam tool which then turned into spam botnet.

    spambotnetsendsafe

  • SendSafe payload

    botnet

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2
• • Target
    $PLUGINSDIR/InstallOptions.dll
  • Size 14KB
  • SHA256 e560384c5298ee2123e8340e716b2c4680f51b4d0347995ba3290dbd1130c6c0
  • MD5 eee2912bd1ee421cf1f1dfb1cc327d97
  • SHA1 c5d3741ddb195718c9b17923eb6abfb7a732bdc1
  • SHA512 1808a068386c790d8ad5096d9fededcfa6e5688e3a68f2499418456c9cafd7b837c811298e6570212155b4a3d6038c1749cfcd9d1b86f090f66d1a5301adecb2
  • SSDEEP 192:qcOqh13v5z+dHeMR2QwHu5S9i/yULWWBZYJCSJyejPK72dwF7dBKEw:qcD13v5SdHeMRRKkwsejP+BV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral3behavioral4
• • Target
    $PLUGINSDIR/System.dll
  • Size 11KB
  • SHA256 44e5dfd551b38e886214bd6b9c8ee913c4c4d1f085a6575d97c3e892b925da82
  • MD5 883eff06ac96966270731e4e22817e11
  • SHA1 523c87c98236cbc04430e87ec19b977595092ac8
  • SHA512 60333253342476911c84bbc1d9bf8a29f811207787fdd6107dce8d2b6e031669303f28133ffc811971ed7792087fe90fb1faabc0af4e91c298ba51e28109a390
  • SSDEEP 96:UPDYcJ+nx4vVp76JX7zBlkCg21Fxz4THxtrqw1at0JgwLEjo+OB3yUVCdl/wNj+l:UPtkuWJX7zB3kGwfy0nyUVsxCjOMb1u
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral5behavioral6
• • Target
    401-1.htm
  • Size 1KB
  • SHA256 fa94df6f2e5857be46ad138172954f7fc2cafc7a8cfd3eea9129e27ac4e73a5d
  • MD5 d05a7dbe8f8c8f02f92b74117dd07fa0
  • SHA1 30ec4bfbd75e0c038d8f6f9cd13061373a19cc8d
  • SHA512 68522461281603406a8f95d6ba8bda1454c067ff006c93b47133a8e374d3cd362c5d4f8fb6f41ddc7adf44d7e3117ea8d1e60ae40fbc0617aab53c790592bec5
  • MD5 SHA1 SHA512

  Score

  3^/10

  discovery
  behavioral7behavioral8
• • Target
    403-11.htm
  • Size 1KB
  • SHA256 1fa9c17c785f3bede1e63131dcf0f5408bf789c4c763f0c4323f7b2266e28362
  • MD5 e03aaa0f48c5ace78c2c0a98d3600a2d
  • SHA1 10d1c6361863100912225e92e63f89a65b6bdf69
  • SHA512 4b8c3bc38e3bf22f416c5eed29028309d64f64eb2d2bd88abf2f2fe9ac6bf9350fd9fb956a6583c9710c7010692f27be4c215dcd839698048043163912bb5dc3
  • MD5 SHA1 SHA512

  Score

  3^/10

  discovery
  behavioral10behavioral9
• • Target
    AnimGif.dll
  • Size 64KB
  • SHA256 e25ae66e70e41c429e3612e4b804960e437ec193a83b3382e064fae996606337
  • MD5 d0785d6bf2f592eb74a6c5a1c9b25655
  • SHA1 ac4eac9a77938f9a7f5f963ca95d9a2706cbe2ed
  • SHA512 116f6b6618d5dba5d03cea33dda2794aca33e6bf2a9fc50568766e3391f3062c55d8d83ef17b51a5284b9167577aa08be1963e18470ac6f073ad74774b968d87
  • SSDEEP 1536:xP4M4JV/aFPjQwYu7n9owTFfl+LzGAGYoDMC3:lY/cjQsoNHGYoD5
  • MD5 SHA1 SHA512 SSDEEP

  Score

  3^/10

  discovery
  behavioral11behavioral12
• • Target
    adcjavas.inc
  • Size 630B
  • SHA256 e0c7d34f7579244762ae5a371ed551a2281e77de09ff0b1b22cd1b1982d77688
  • MD5 8b9319b9c5043cf0efe0af3483dc069b
  • SHA1 feeafc0237443741acc7c6e8bef7772930bffa30
  • SHA512 622c1ac8b4a0d2417771af249dd4c0c92a6b3f46b000accec7e0ea4a86cc9142edc4d361ff73c2ff48b431d5c8e9b82f173cec3620409d643d64ac6cdeefefad
  • MD5 SHA1 SHA512

  Score

  3^/10

  execution
  behavioral13behavioral14
• • Target
    package-frame.html
  • Size 3KB
  • SHA256 2f24b0d323e739bbdfe25d65f7570840c28cc26edab3d78dc83a7338db291881
  • MD5 16487f59f299011ccb52c9f86f703547
  • SHA1 bc0369cfa3abf23d260ad6c646fe03b7dd4b3007
  • SHA512 7ac2e5da362d7dde9b3611021b650fc5ce4937c2c30dc1f2435017460ccb742ce7d54b5ea37fe14cb1ee51f484157611956c03683865d62d0473e400e322c536
  • MD5 SHA1 SHA512

  Score

  3^/10

  discovery
  behavioral15behavioral16
• • Target
    wrap.js
  • Size 1KB
  • SHA256 e74bd34766e0d98984658cf1c4a19210c72708f78a98022588ce0a1220bfa160
  • MD5 8d7644cf4be23b04b33359072eb832f2
  • SHA1 6ca4f1363602afbc9f6ec865e06c859d1a91dcae
  • SHA512 7c693cf1693b189ec0df5995f8d77189f9104aa982c66fe0b07c3dc3228b90811242b99ce8b986ed80d5b8d5fea67c3972b260fc8933ef3180e88e4d4ce0a192
  • MD5 SHA1 SHA512

  Score

  3^/10

  execution
  behavioral17behavioral18