3ead2083cc44733cc24645994838622ac20793e7f126362dd842a5b39eb0365f | Triage

Sharing

General

Target

d5503d8a5f17c709fd6c3eb3013497f2_JaffaCakes118
Size

4.4MB
Sample

240908-3tf66a1fnj
MD5

d5503d8a5f17c709fd6c3eb3013497f2
SHA1

2480d00eb2c36e010812d86ea7a537c2e392a512
SHA256

3ead2083cc44733cc24645994838622ac20793e7f126362dd842a5b39eb0365f
SHA512

003e1e7e86db3bed63bd5404032e8edf7bf173dcce0ba9c3edbe2ff35eae70523a36d3345e0eadd475f49665dfe060069d12b2bca09e2b03445a862361bb516b
SSDEEP

98304:SP8SyqYdmRcWkx84hbzp/VILCevb0vRRCNtDhIfrHiJJE:SLdYJxfRz8LCe06Ref

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  D3DHACK.dll
- Size
  
  50KB
- MD5
  
  946460fadf6339fbc0bc676df820d826
- SHA1
  
  f23bf018907a6163eb08d351061d2eb1dee60f31
- SHA256
  
  d055453c45a01468f20ba9956fcef3c9049b9889bc5f9a9bd01a19aab76b4286
- SHA512
  
  c0d5c79cd57a84205ba1a07185907388d38d91986036adee26e5f2e666f895bd1232066ef3e130d5d12882e26caec2a00327a5aa5d6ea0ab16410e357a00267f
- SSDEEP
  
  768:3qRRCTvizBhUwkkDbW8nwcwAij4xEfDSI+x+:6HkQbnwcG4xEfD5+x
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  System/Msvcp60d.dll
- Size
  
  504KB
- MD5
  
  7df2f6b39b55c3f09be45229abba18c0
- SHA1
  
  55ffefb0a33bce9f81a229fa34a4ba7f6bca9aef
- SHA256
  
  509df87c41b21e251ba692776013fd3745a51cc147a776910675bfb46ddc98dd
- SHA512
  
  2e7ddd6666d06e7af285d0453e4deee6360b0ae51004915c6e2fd22c200d9d04990e82df04cddf28a88a278e1cb2ceff0df8384483839cca9cf00596dc2e6b4a
- SSDEEP
  
  12288:/ygHEPY6hY5jIXVc22+kqEzcM+X90ktKuq3OoxHkC9a:aVc22/1+X90ktPq3OoxHkC9a
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  System/msvbvm50.dll
- Size
  
  1.3MB
- MD5
  
  157b3267a46a79dd900104f241da8c4c
- SHA1
  
  178271eaf8c48384e206cbaebcbbc12030980410
- SHA256
  
  8611dc1b60ae5c383bba6cb3ffd8a51aeebff23b95844f0ab3d6e5ecd0fadc84
- SHA512
  
  acb496d811386c98ac67664ce9aeda86e49309e45430a4b66bd8433030afd0eab87ddabfda60b5bfbbfa2c84c118f89a5e636de7d0280c668a1c85bb5cbf7fff
- SSDEEP
  
  24576:1OYgy5FNbLxbKtz6PIYTccJf2Ak0q+o82Ngdqr2Q7N1wo+AYOHu/Ek5:ZVHNJf2AU3NxjN1wo+QO/5
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  System/msvbvm60.dll
- Size
  
  1.3MB
- MD5
  
  5343a19c618bc515ceb1695586c6c137
- SHA1
  
  4dedae8cbde066f31c8e6b52c0baa3f8b1117742
- SHA256
  
  2246b4feae199408ea66d4a90c1589026f4a5800ce5a28e583b94506a8a73dce
- SHA512
  
  708d8a252a167fa94e3e1a49e2630d07613ff75a9a3e779a0c1fcbec44aa853a68c401f31a2b84152f46a05f7d93f4e5e502afc7a60236a22ac58dea73fa5606
- SSDEEP
  
  24576:LlDYRayxYMsEVcQtFyBw2fO+wgw7HsltDngDG+QryQF63xxWPByACxlQ6kMX1Kse:BOayxtXyrgs3DngDyyQFwxxWPcxlQ3cf
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  System/msvci70d.dll
- Size
  
  92KB
- MD5
  
  1274179d2de62821603174ffc41363d2
- SHA1
  
  db2a5ade12495d7972d2edaa1b85e8f426636ee9
- SHA256
  
  7586794fe2b92060062cbf39a7466fd21d6c54899566cc8156000cc36c988250
- SHA512
  
  0b6368c55365ba48db4fc7c5032724adf7d61942ce3e0c2526a942fd76c31fb6f2bf848ab6177a63b04df220b980a28fd1e0d4ac5128a7277ed5bf88d5d0aed1
- SSDEEP
  
  1536:leyZ2QWLGLXK6RZ+v6gSyYbfVN05FdBs6QXHhAk/tfel:leyZNLL6oYSrfVNEFUzXBAk/tfe
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  System/msvcirt.dll
- Size
  
  58KB
- MD5
  
  126b75d50756fe204283d418ae1a66df
- SHA1
  
  83bbb6b142db7351c5547fbe46df56c8cc596aef
- SHA256
  
  3d12addcfd4d7233c787101c848fd1d7a62b6b6386fb2043b3d8f45502950312
- SHA512
  
  b782c79e2428eba1d8035a36582ccbbaf2fc3e605720fa4cb9a1d135edfe971034cc39f48d271e5ea1096ee7043b5024f7c73135703b54d88e7cae1877728d16
- SSDEEP
  
  1536:i4yXlB6QXHhAk/tqtCDJUQB08E0Rm6bC2me:byXlBzXBAk/tqtYJzj4GC2
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  System/msvcp100.dll
- Size
  
  411KB
- MD5
  
  03e9314004f504a14a61c3d364b62f66
- SHA1
  
  0aa3caac24fdf9d9d4c618e2bbf0a063036cd55d
- SHA256
  
  a3ba6421991241bea9c8334b62c3088f8f131ab906c3cc52113945d05016a35f
- SHA512
  
  2fcff4439d2759d93c57d49b24f28ae89b7698e284e76ac65fe2b50bdefc23a8cc3c83891d671de4e4c0f036cef810856de79ac2b028aa89a895bf35abff8c8d
- SSDEEP
  
  12288:iHEqYsrMWIqz473PTiPoH/aGhUgiW6QR7t5qv3Ooc8UHkC2eKq87:iH9YsIWIW4rPTiPofaDv3Ooc8UHkC2e8
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  System/msvcp100d.dll
- Size
  
  725KB
- MD5
  
  d9b66b1509639cc71ddc703225c65823
- SHA1
  
  143d65a3f90c19ea57fd902f35c4d5ca87db2c1f
- SHA256
  
  555eb31b526096c6f6a3b6ee768dad1c1ef5cb8f0165071673164d64e7063f61
- SHA512
  
  623c60b12e5ba64d6f507766c273989d2c01aacfc5764e597cfcdb2e7c98d41359e107ff309418062ab1df78af764145a28d855637f3ebff51e8dce548cfe718
- SSDEEP
  
  12288:C6NK3D/KRhB6y8C6y8I8cLzoyiM9z69Pw9Pj9PAJFxNZVBdplrLg55JFxNZVBdpe:C6NK3D/28cLC2ekwhyO5qa6v3Ooc8UHx
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  System/msvcp50.dll
- Size
  
  552KB
- MD5
  
  11ce755e00794c8ccd1a4f71282f8167
- SHA1
  
  4089238b9294d6baa4d573198a0e51a9c61502b2
- SHA256
  
  59b71e3c787d7f5f09cec2e467493c1e60a231526529699a00cfcaeb595e4b92
- SHA512
  
  fa114e6a52415a372be6c1b42b9f56cf0f84ebc7cfa5835937a54f1fc964e448e6a486f5019f47bb3b5e6b0ce634ee2a594b84756d3d38fe0e7fc6a43c5ddf50
- SSDEEP
  
  12288:Ol3kpKgpWFynTJ2VKBrCT8Wbyyj61xz7q3OocHkCA9:3KgpWFynTN9CIWK1l7q3OocHkCA9
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  System/msvcp60.dll
- Size
  
  397KB
- MD5
  
  46a6ba9274d075a2c30025c4e96d875a
- SHA1
  
  da2cbb166d5278d84291202394791f3fb8b74500
- SHA256
  
  5a7d7335ec2e5e08dc459e2c972a2a8d62aec500452f1773ade272b56c12ec56
- SHA512
  
  8d78a7b21bda19e1d7e4781fea21936db0e76329cf3cc79c3aeb939e0361a4a0fc3271502b9e928b07f0b71be5ff4d466502634796a9fc94a45684a99f0822da
- SSDEEP
  
  6144:Asrat03OoxHkCIaD47A2OLK6O/+ejak6+T2:AsOt03OoxHkCH87YLK6OPji
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  System/msvcp70d.dll
- Size
  
  720KB
- MD5
  
  d7e451fae90281de2460a02a56020da7
- SHA1
  
  72f7c2939c66c03325b92477100580e1e7778059
- SHA256
  
  c12d40d679181a6a07264e923bba605a92f0a03644970f4a75188c698fa7d7ed
- SHA512
  
  08ece1f3064bf01b03493552dee8a1c0a8be8746802140040334576d6a471e44e5755032c9c889911584871c651c0f1f239e560fab29be58cce92526f2a60c2a
- SSDEEP
  
  12288:AgbxEPYyEPYQmDclL9nDQL9ObeL9AVZE0osAE48QUIV0osAE48QUIMs0osAE48QE:lVfzvINm5QNxU3Ooc8PHkC2eMjF
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  System/msvcp71.dll
- Size
  
  488KB
- MD5
  
  561fa2abb31dfa8fab762145f81667c2
- SHA1
  
  c8ccb04eedac821a13fae314a2435192860c72b8
- SHA256
  
  df96156f6a548fd6fe5672918de5ae4509d3c810a57bffd2a91de45a3ed5b23b
- SHA512
  
  7d960aa8e3cce22d63a6723d7f00c195de7de83b877eca126e339e2d8cc9859e813e05c5c0a5671a75bb717243e9295fd13e5e17d8c6660eb59f5baee63a7c43
- SSDEEP
  
  12288:fJzxYPVsBnxO/R7krZhUgiW6QR7t5k3Ooc8iHkC2eq:fZxvBnxOJ7ki3Ooc8iHkC2e
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  System/msvcp71d.dll
- Size
  
  748KB
- MD5
  
  d752342f33ba6090d12cbc2c8139bd39
- SHA1
  
  be218e1af26d33eac26316bcc9494a1487b8d3e3
- SHA256
  
  c19c69ead56b16a8bbc81cb8067e1cbe43c3c2c44c7f1fe8438bd9357fa90918
- SHA512
  
  2882315b907689ce9b85620ba7051d0b8a86faaae204520586a4868b2f4e3a90f47081c3e0ebc0250f8b68f0b19bc37d50ca26bccf3ba3f67a27d35b45e268f9
- SSDEEP
  
  12288:dgbaEPYdEPY2ST947OcOk9Oc/LjOc1+DD0osAE48QUI00F0osAE48QUIh110osAy:QSdWvPFypjoM3Ooc8iHkC2e
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  System/msvcp80.dll
- Size
  
  536KB
- MD5
  
  2bc650257fb0867abd54fd460ec2bafc
- SHA1
  
  ec063526aa14bcadeeffa6d859b39a80680015b7
- SHA256
  
  9fc2e85ba84cf0459aab0dc2efac734ad7b5b4c99ba19871fe8f6e35d0191838
- SHA512
  
  903966f1739727d166131b42df6a7cd77d4f734c01437f7d96f18e8cb2c60a8e49bd952452fde8f0d3a92a002d2404ee78b97472821c190b300c594a5525c0a2
- SSDEEP
  
  12288:BuYZhMltDoD+OSt+ujajk5RnchUgiW6QR7t553Ooc8NHkC2euB:oOhMltDoqvpjajk59g3Ooc8NHkC2eW
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  System/msvcr100.dll
- Size
  
  752KB
- MD5
  
  67ec459e42d3081dd8fd34356f7cafc1
- SHA1
  
  1738050616169d5b17b5adac3ff0370b8c642734
- SHA256
  
  1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067
- SHA512
  
  9ed1c106df217e0b4e4fbd1f4275486ceba1d8a225d6c7e47b854b0b5e6158135b81be926f51db0ad5c624f9bd1d09282332cf064680dc9f7d287073b9686d33
- SSDEEP
  
  12288:fQmCy3NeRjkpQmj3oaMtQqjoygfXq3kon9IlbgaOxQdVJJ6j5EBKX8hR5:ImCy3VQs9MtLjTgfa3kon9FaOdEz5
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  System/msvcr100_clr0400.dll
- Size
  
  753KB
- MD5
  
  e5f7c30edf0892667933be879f067d67
- SHA1
  
  194bafde1dc094ec1e49d9371bc12408483d6564
- SHA256
  
  e4ba45f4c6c74a0cde9b12a00c91e2f5ef83536c89c9053dec507cbb4f130a12
- SHA512
  
  dfcec8352e5ea3f9b4e0321ea39008225f5e541fccf95d7e63568d0f91ab110e749783d8da90fba8099a12cb11f70d6e98472fe71f7a72781017c4790b12d378
- SSDEEP
  
  12288:s7LmCy3uPEjeA8VoQjMYp/NQs0iX4+54S+2jX1nuHSaQBsWL9d0ve+:snmCy3uPEJ1QYYVNQs0iX4+54pKF1Vsh
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32