36417b50b830fd546b1c674477404bd5a952b3387b25b13437f01bd898212197 | Triage

Sharing

General

Target

d5cdb1b3c898fad102ee3b0356e4a18b_JaffaCakes118
Size

2.2MB
Sample

240909-hgsn7swarl
MD5

d5cdb1b3c898fad102ee3b0356e4a18b
SHA1

87930c2325a527ad385d69b2921fca9fbf364d3f
SHA256

36417b50b830fd546b1c674477404bd5a952b3387b25b13437f01bd898212197
SHA512

ae5abd6ea74430f1c031f75570a07972168ec334f3df0fcab25f4a65ddbc04a2508093c4ae0a745076d0ccde36ef7491c5c7550c9a522bb86b1d855efbe9fba7
SSDEEP

49152:SOmJm2lg7LzAFBfsLrBljNH579jB/GGZ+x5srJtWF8dT7HT1zCHpK:SOmUokL0FBf2tHHl9V/d+x5srJtWF87v

Score

7^/10

discovery execution upx

Malware Config

Targets

- Target
  
  d5cdb1b3c898fad102ee3b0356e4a18b_JaffaCakes118
- Size
  
  2.2MB
- MD5
  
  d5cdb1b3c898fad102ee3b0356e4a18b
- SHA1
  
  87930c2325a527ad385d69b2921fca9fbf364d3f
- SHA256
  
  36417b50b830fd546b1c674477404bd5a952b3387b25b13437f01bd898212197
- SHA512
  
  ae5abd6ea74430f1c031f75570a07972168ec334f3df0fcab25f4a65ddbc04a2508093c4ae0a745076d0ccde36ef7491c5c7550c9a522bb86b1d855efbe9fba7
- SSDEEP
  
  49152:SOmJm2lg7LzAFBfsLrBljNH579jB/GGZ+x5srJtWF8dT7HT1zCHpK:SOmUokL0FBf2tHHl9V/d+x5srJtWF87v
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  325b008aec81e5aaa57096f05d4212b5
- SHA1
  
  27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA256
  
  c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- SHA512
  
  18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP
  
  192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/UAC.dll
- Size
  
  13KB
- MD5
  
  bcec2a6095d38abc192a68d094c302d0
- SHA1
  
  9e88c5b957b45524690513b75d81dee259d5d599
- SHA256
  
  446000200eff4f9c20761ce1680902daba190c81a57154f4917b1741d7800e3c
- SHA512
  
  b48e85a17904a104eef573358763a0b1215eec96f72f83ff544d2dab22737bc42411ca505adf3f7e95c6f7e7997ad3e408f258093727105b678d5eee8d8e6278
- SSDEEP
  
  192:mNnXQprEE3vHosEWFt6F5SLdn93YUCzj7qUFVWsSCDLjcOq98sswY:WnXQphvHJFoFe93D2xVWsSCHZq98FwY
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/inetc.dll
- Size
  
  24KB
- MD5
  
  ef630cf1898c257df36b1037bd1e5392
- SHA1
  
  b2c47d9a741d2b5391387059552b37f2daddade2
- SHA256
  
  41776a77b4e3bba1c3e70d10b9f560248148b8f2c45d39d4cd8683754112860f
- SHA512
  
  986b405d723294ff5b3649f899bc048c5693bd386dc3f489b390ccb1d56e8e65a9dbe6d0863d553525ce93d505a162eaa087faf4b4c5133345c3330d01327211
- SSDEEP
  
  384:TzBnI67jSmHQvw+Bf4HD4Cza5Sh2ze7VW3Pvg5TEnzuomuHya93ld0Ac9khYLMkY:TtIajSmiw+iDLth2ze78PvgynzuzuSaf
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/nsProcess.dll
- Size
  
  4KB
- MD5
  
  05450face243b3a7472407b999b03a72
- SHA1
  
  ffd88af2e338ae606c444390f7eaaf5f4aef2cd9
- SHA256
  
  95fe9d92512ff2318cc2520311ef9145b2cee01209ab0e1b6e45c7ce1d4d0e89
- SHA512
  
  f4cbe30166aff20a226a7150d93a876873ba699d80d7e9f46f32a9b4753fa7966c3113a3124340b39ca67a13205463a413e740e541e742903e3f89af5a53ad3b
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/nsUnzip.dll
- Size
  
  146KB
- MD5
  
  4f53c88fdeb35a868f8aacc745a0a092
- SHA1
  
  698e8bc6ec6c78bce7392a52ff4958bbc2099eb2
- SHA256
  
  45de189f4e7bc73149cf6a6fc672eb053d561c514a82b4751e64c96125c7f693
- SHA512
  
  c9bb539844a719ff8c65822c3c27b8edec46b510055fc2c6d0014219f414df11e77d44fcf44826d520e1d1f730afc85381d4279f9a15320e277bf5804984aa5b
- SSDEEP
  
  3072:WbopEqCiDI9YRvpCVd7VN6BAmcxawmtvvhNdzdc/eMk54iyWH4Ptb1:Wk3FDZRvpKZkzhNdzd2eMk54v1
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  chrome/content/background.html
- Size
  
  205B
- MD5
  
  e0773073008823c0984a04d36a8ede17
- SHA1
  
  705c58346cd711f62b1c2a6f5fc9577e818b4b9d
- SHA256
  
  3067cab19bd3de55ef24ec64a55a553df92b961a8fafe6365198d13f4b8f91db
- SHA512
  
  471aa2c2685c1567f4eaf7cfd8f063497662ab5badd138b0b40eef0a75e0b457397ff958147924b34757b6ee1a780f48724aca9ccf03176328b8002ee2741410
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  chrome/content/bg.js
- Size
  
  1KB
- MD5
  
  a19aaf26adc5657225142abfff347450
- SHA1
  
  fa21e3f796869b390ce28fab66b92240b96dae04
- SHA256
  
  904ccdf634dc4e0fb650b72394da75aedad0a711c9cf42ad94f8f08690a7c40a
- SHA512
  
  6592610acac1fb7fd00b44ada294285b24fcd2dea24b702e005eb1aa7979343d19a4854dfc959608ffe68d0b03a6d5fe8062ebff3d9f3315b21701cbb16e6db8
Score

3^/10

execution
behavioral17 behavioral18
- Target
  
  chrome/content/config.js
- Size
  
  243B
- MD5
  
  b21489c1e1e5f8d2e5d07d944f728fb8
- SHA1
  
  79a1f13af8b1f545110e5254ad9f8d0a6bf47271
- SHA256
  
  9e49561751867948eb99a29695aa75384c809e159d076167e3e6b3e542520ba1
- SHA512
  
  4e46123c8859cf7a51039b9c209d1524fe77d87fac14afc718259092535a98ae03d3bdea62d00c1c477b12676bf9991c2f604b5705c1afe5fd7d6479e8b22bbe
Score

3^/10

execution
behavioral19 behavioral20
- Target
  
  chrome/content/framework.js
- Size
  
  24KB
- MD5
  
  e983b3ce1befc1a4fc380f4734134562
- SHA1
  
  6f449d9af927c0dc108691e826fac64ddc99b954
- SHA256
  
  e3220c88ceda7174b79052256dc191d80da86ce6c7a95575c1a224ab03c79d37
- SHA512
  
  091f3cd1e2d3f4cee0b4c6870f4012c10fcaa3b9ad7ebb6ac0c23666058c7467f9b05df4f40f9cecafa67c97c9babe49601bfefee455d2f08daf74f0d2e70d82
- SSDEEP
  
  384:CW/k6q6m7oM2reXXXBDh22RVXHDMclfjVCuP0kO0o3h3van5sk90ARARxxjCDjg:B8XXX7Sclf5xP+0gg5n0ARATxjCvg
Score

3^/10

execution
behavioral21 behavioral22
- Target
  
  chrome/content/jquery-1.9.1.min.js
- Size
  
  90KB
- MD5
  
  397754ba49e9e0cf4e7c190da78dda05
- SHA1
  
  ae49e56999d82802727455f0ba83b63acd90a22b
- SHA256
  
  c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
- SHA512
  
  8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb
- SSDEEP
  
  1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
Score

3^/10

execution
behavioral23 behavioral24
- Target
  
  chrome/content/referId.js
- Size
  
  17B
- MD5
  
  45976cdc036f601176dec4a6666b7f47
- SHA1
  
  a2aa1435c39982e420914f3731ef98c24c1eea5b
- SHA256
  
  4cb217e149b059a7099809b7fc6ed0f6492fcb66429132b8856119dedbcd9726
- SHA512
  
  f41b79953c4fbda981cd60cbef346c0afd55eb5cf3d1366facf2f35a5d71f33e5f25d1f2586529d18b430f26d8e95da1ab0015e0fd9340830fd874edd3002658
Score

3^/10

execution
behavioral25 behavioral26
- Target
  
  chrome/content/subscriptloader.js
- Size
  
  517B
- MD5
  
  54d5e91a269e090153d29428c8e98b11
- SHA1
  
  846e1c4244c2143b81d6639d4b810d89042259ef
- SHA256
  
  c14db14db5c025840329b6fe1bc03a03f0b5026639f9ee57d097d11afeeb5e57
- SHA512
  
  71bf3e11f72cbdd23d8fe4245be164041363fccbf8f7c319a5c6056bf67eeea27ea8b2c2836769a1977e58ae3d8559cadcb904852597cf2b982b4b6a19b9600c
Score

3^/10

execution
behavioral27 behavioral28
- Target
  
  plugins/npOutfoxTV.dll
- Size
  
  70KB
- MD5
  
  b70c24155c24ac9c2c0cb847dc82a804
- SHA1
  
  63d088b114cf2274fa284669400b97e4c6b95f08
- SHA256
  
  543b1c8db92a18069806db17e22b062ad97a4ca408ab54089706c2f2d10c3ae9
- SHA512
  
  71d9caca5319eccb5be146902a548fee8b7ef7960e943fe5683fef914dd6be677824ce39c6f2b7517d83614fc3dddc22a2249f47fe7a54e7054072c103483607
- SSDEEP
  
  768:OFmpmifah3E9eul/sjkQpeYrhNtNqnQszzV0DgRukcZuSN2L4ynDEDw/FT5hixeu:DpmOahful/UqO4zODgwk/jx1ixv9jZt
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  OutfoxTV/DesktopContainer.exe
- Size
  
  312KB
- MD5
  
  72cc07ff2456a9b27ca9bc70efedf83d
- SHA1
  
  9a2ff97a4ecd299d5f54e646f23e63c200b8515a
- SHA256
  
  87df34ee83f339d0dd1ac706231a240bc57681c83eed2f55c9b9503b767dead3
- SHA512
  
  2dfc9db7b0a45f20daaf5e8f38f83c1f28e524d3af144cf42b00c271216034ca9310b325e0eb999ef3616543e2c120bce5010e9530cde80f7f21c9dc9df94dc0
- SSDEEP
  
  6144:Ug1UFSPI1l0SddmeqZA1jtUcRsC2DEmCboIm/KSvD+WbpAHM:EoQX0Amu1B0tioIuKqKW9r
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral31 behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Browser Information Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32