45e6bff292ee9ea3f184d0c87f8e77d97e900794dc3fa1add703a5e82821db19 | Triage

Sharing

General

Target

e075f0e02e423a93ca1db906a95f9cff_JaffaCakes118
Size

46KB
Sample

240914-sp2xys1dla
MD5

e075f0e02e423a93ca1db906a95f9cff
SHA1

e5551f2cccb9c19c25f9c2994de3e5283678ff41
SHA256

45e6bff292ee9ea3f184d0c87f8e77d97e900794dc3fa1add703a5e82821db19
SHA512

2313f4c20c857da81a8ecd56bb3b56f4d2143b15b4d78bf68fca481c1a5b309c27d954c34e908225c4759bc6958b81f8254ebf3e0b6df835bbe3b6b0400abc3a
SSDEEP

768:h4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJcjXq9N0HqgzHSNOYxsIeX+YT:6LXB65939tY6HBg4sXJcjXS8qcy45uWl

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  e075f0e02e423a93ca1db906a95f9cff_JaffaCakes118
- Size
  
  46KB
- MD5
  
  e075f0e02e423a93ca1db906a95f9cff
- SHA1
  
  e5551f2cccb9c19c25f9c2994de3e5283678ff41
- SHA256
  
  45e6bff292ee9ea3f184d0c87f8e77d97e900794dc3fa1add703a5e82821db19
- SHA512
  
  2313f4c20c857da81a8ecd56bb3b56f4d2143b15b4d78bf68fca481c1a5b309c27d954c34e908225c4759bc6958b81f8254ebf3e0b6df835bbe3b6b0400abc3a
- SSDEEP
  
  768:h4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJcjXq9N0HqgzHSNOYxsIeX+YT:6LXB65939tY6HBg4sXJcjXS8qcy45uWl
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  14KB
- MD5
  
  a5f8399a743ab7f9c88c645c35b1ebb5
- SHA1
  
  168f3c158913b0367bf79fa413357fbe97018191
- SHA256
  
  dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
- SHA512
  
  824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
- SSDEEP
  
  192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/nsArray.dll
- Size
  
  6KB
- MD5
  
  6206b94f91e92b7f7f72214c438dd414
- SHA1
  
  09281ee4a76aa7dce016e7476ce33aa74246a0c6
- SHA256
  
  b15de38c9d72eef3c8ac9336c39debb10edc8e4a26bcc32b319f6ae8c9141380
- SHA512
  
  502bedef4fe934c74903ea01036fc265b950a8bb4927f6b285926ff53140fa8a78f37bc7e39a8de8ccde0ba6cdf9d0f512379c9fef86ad60192ed4b447c00fd0
- SSDEEP
  
  96:QVtJ0bb2EKqyp//c6fbQ2Pz9AqgCLAk9F5LeT2b8HIK/O0iRxGQFIfA7gfMxLfA0:QGbQvp3c6/PwCLAk90K8DysQf0M2dja
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6