1c360dcaf5ff657d3009205fa0fb2e7e67e64e48edfdd75218687aeb0b925afe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c83dd872feec6a4fb41e113713106376_JaffaCakes118
Size

280KB
Sample

240829-fdzx1athmh
MD5

c83dd872feec6a4fb41e113713106376
SHA1

ba6867af556eff2b6876dd9b17556c05fd190567
SHA256

1c360dcaf5ff657d3009205fa0fb2e7e67e64e48edfdd75218687aeb0b925afe
SHA512

63295f5db25e7f0c95f795f8765edf799bf4e4a1835b2cad05c5f5c7ee2e62416bfacb6c4a3dd1749f2342cf65720196bb02b665bef3da41caa26069b7b48612
SSDEEP

6144:r6orh4HGzvvILsN4CGh4HOsYr3YeJRc9aY0HDGgJkkeqiPh7YJZ:meJosN4p3sm3k8DGgveqipMZ

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  c83dd872feec6a4fb41e113713106376_JaffaCakes118
- Size
  
  280KB
- MD5
  
  c83dd872feec6a4fb41e113713106376
- SHA1
  
  ba6867af556eff2b6876dd9b17556c05fd190567
- SHA256
  
  1c360dcaf5ff657d3009205fa0fb2e7e67e64e48edfdd75218687aeb0b925afe
- SHA512
  
  63295f5db25e7f0c95f795f8765edf799bf4e4a1835b2cad05c5f5c7ee2e62416bfacb6c4a3dd1749f2342cf65720196bb02b665bef3da41caa26069b7b48612
- SSDEEP
  
  6144:r6orh4HGzvvILsN4CGh4HOsYr3YeJRc9aY0HDGgJkkeqiPh7YJZ:meJosN4p3sm3k8DGgveqipMZ
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/TvGetVersion.dll
- Size
  
  50KB
- MD5
  
  8a7e84767eb93fa6c39d29d8b97584b4
- SHA1
  
  b0f45541a2022c462ba27aeac927f8712a786f53
- SHA256
  
  0b35c3ca9b18ccd86f7d658876ffa459d2de1c3b78772d5d81cd91817f20049d
- SHA512
  
  b675e2c60b847beec79b03830c776b84a261fda34b346a990e12028cbd3ed2263498a51c8ca55fbd0beb2d72a508a814517edb670efdac5939c317ca8f86840d
- SSDEEP
  
  768:2UvmKrMU4LU0v6eSalrT7ScKddLSZMMyk1fjh4xnO82r11t5Jkhbo:2U5yU0vXlHWByMMZfjypOpft5S
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $_0_/TeamViewer_.exe
- Size
  
  207KB
- MD5
  
  cdd72666e418827504214b843605e76d
- SHA1
  
  24bd013c25348fb2a77077dd34fef05b575c0113
- SHA256
  
  3e92968451462732af9f5c433ad573a4523c4b6c1a928909d846d3fbbba357df
- SHA512
  
  0280d02d30cf356b7983683a01ce4d6f26a2fd9ccc954c6c8bc8ced95876d85611d09d72946e631406d1dc5a393a42b0495b68d7d3817ccebae854464f856f03
- SSDEEP
  
  6144:WN4CGh4HOsYr3YeJRc9aY0HDGgJkkeqiPh7YJZ:WN4p3sm3k8DGgveqipMZ
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/FindProcDLL.dll
- Size
  
  3KB
- MD5
  
  8614c450637267afacad1645e23ba24a
- SHA1
  
  e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2
- SHA256
  
  0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758
- SHA512
  
  af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  4KB
- MD5
  
  99f345cf51b6c3c317d20a81acb11012
- SHA1
  
  b3d0355f527c536ea14a8ff51741c8739d66f727
- SHA256
  
  c2689ba1f66066afce85ca6457ecd36370be0fe351c58422e45efd0948655c93
- SHA512
  
  937aa75be84a74f2be3b54dc80fac02c17dad1915d924ef82ab354d2a49bc773ee6d801203c52686113783a7c7ea0e8ed8e673ba696d6d3212f7006e291ed2ef
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/StartMenu.dll
- Size
  
  7KB
- MD5
  
  4e96f412a8cc653053d5d918df6b0836
- SHA1
  
  a3c7d59043feecb1603874b27c23d4166b341f2d
- SHA256
  
  e4a54bfc327986a89165bdef361069810aaa985c3abecd442c786725fabaf977
- SHA512
  
  2fec61b4ad31250bdbdbbfd551d831801790b96902c67200661e8f4f2753378bbf6c0c88b12e1be9173a29597827c1c4809511b6d52666dc3324bd7031c8229d
- SSDEEP
  
  96:IiqA7bDe2xHkR1C41EhvSE+6nNtMn0iGd8CqRLqtJ1trRhElfL:IiqA7/ZH0uQMtcfCqo/tdgf
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  00a0194c20ee912257df53bfe258ee4a
- SHA1
  
  d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA256
  
  dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- SHA512
  
  3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/TvGetVersion.dll
- Size
  
  50KB
- MD5
  
  8a7e84767eb93fa6c39d29d8b97584b4
- SHA1
  
  b0f45541a2022c462ba27aeac927f8712a786f53
- SHA256
  
  0b35c3ca9b18ccd86f7d658876ffa459d2de1c3b78772d5d81cd91817f20049d
- SHA512
  
  b675e2c60b847beec79b03830c776b84a261fda34b346a990e12028cbd3ed2263498a51c8ca55fbd0beb2d72a508a814517edb670efdac5939c317ca8f86840d
- SSDEEP
  
  768:2UvmKrMU4LU0v6eSalrT7ScKddLSZMMyk1fjh4xnO82r11t5Jkhbo:2U5yU0vXlHWByMMZfjypOpft5S
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/nsExec.dll
- Size
  
  6KB
- MD5
  
  e54eb27fb5048964e8d1ec7a1f72334b
- SHA1
  
  2b76d7aedafd724de96532b00fbc6c7c370e4609
- SHA256
  
  ff00f5f7b8d6ca6a79aebd08f9625a5579affcd09f3a25fdf728a7942527a824
- SHA512
  
  c9ddd19484a6218f926295a88f8776aff6c0a98565714290485f9b3b53e7b673724946defed0207064d6ab0b1baa7cb3477952f61dbe22947238d3f5802fa4f4
- SSDEEP
  
  96:57GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3VI9d0qqyVgN532E:VKgfwgcr8zylsB49Ud0qJVgNQ
Score

3^/10

discovery
behavioral17 behavioral18

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18