b172efc475c40a628e13092afcfcedb21d9563431c869b8ca9ae9fa63455166a | Triage

Sharing

General

Target

eabb93f8490f3b301edd257d2d66d020_JaffaCakes118
Size

46KB
Sample

240919-gwmaasvcll
MD5

eabb93f8490f3b301edd257d2d66d020
SHA1

053b5da14bb711a162d942e12a7fce2fbf5396a0
SHA256

b172efc475c40a628e13092afcfcedb21d9563431c869b8ca9ae9fa63455166a
SHA512

a4ac8c3e9c3a8106dd73172059ef6466c71e70abd2f823b60872a7738b050d3bd2beb574d9f86203062ff0ba05ee8ef34dce4f02fc08984c1e20ddd6563ab5d9
SSDEEP

768:h4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJc2dHKkq9N0HqgzHSNOYxsIeQ:6LXB65939tY6HBg4sXJc2dFS8qcy45ul

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  eabb93f8490f3b301edd257d2d66d020_JaffaCakes118
- Size
  
  46KB
- MD5
  
  eabb93f8490f3b301edd257d2d66d020
- SHA1
  
  053b5da14bb711a162d942e12a7fce2fbf5396a0
- SHA256
  
  b172efc475c40a628e13092afcfcedb21d9563431c869b8ca9ae9fa63455166a
- SHA512
  
  a4ac8c3e9c3a8106dd73172059ef6466c71e70abd2f823b60872a7738b050d3bd2beb574d9f86203062ff0ba05ee8ef34dce4f02fc08984c1e20ddd6563ab5d9
- SSDEEP
  
  768:h4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJc2dHKkq9N0HqgzHSNOYxsIeQ:6LXB65939tY6HBg4sXJc2dFS8qcy45ul
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  14KB
- MD5
  
  a5f8399a743ab7f9c88c645c35b1ebb5
- SHA1
  
  168f3c158913b0367bf79fa413357fbe97018191
- SHA256
  
  dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
- SHA512
  
  824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
- SSDEEP
  
  192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/nsArray.dll
- Size
  
  6KB
- MD5
  
  6206b94f91e92b7f7f72214c438dd414
- SHA1
  
  09281ee4a76aa7dce016e7476ce33aa74246a0c6
- SHA256
  
  b15de38c9d72eef3c8ac9336c39debb10edc8e4a26bcc32b319f6ae8c9141380
- SHA512
  
  502bedef4fe934c74903ea01036fc265b950a8bb4927f6b285926ff53140fa8a78f37bc7e39a8de8ccde0ba6cdf9d0f512379c9fef86ad60192ed4b447c00fd0
- SSDEEP
  
  96:QVtJ0bb2EKqyp//c6fbQ2Pz9AqgCLAk9F5LeT2b8HIK/O0iRxGQFIfA7gfMxLfA0:QGbQvp3c6/PwCLAk90K8DysQf0M2dja
Score

7^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6