a14f7ad32763ab7aa0d3cf1bf8b3b3ef2fb52e2a2a2c903321412b717b402128

Sharing

Copy URL Twitter E-mail

General

Target

efed45c31266b332f74ef2f2d5fcd6d1_JaffaCakes118
Size

1.5MB
Sample

240921-q4epvsvfqc
MD5

efed45c31266b332f74ef2f2d5fcd6d1
SHA1

bc343fbf95c2371f140f08803c87a92842f2f2e4
SHA256

a14f7ad32763ab7aa0d3cf1bf8b3b3ef2fb52e2a2a2c903321412b717b402128
SHA512

113cbb817b601e2b0684791432e716331cf411da779561810f37476de84705e72610185a2f14d0825b068aa604dac0690b706a6a36c255a7f1c566d1c8dcfa62
SSDEEP

24576:1jw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFQn9deCw/ooYOF22QtlbvVM:1jw1dILPAX8ln6aB4WP3E29V8S4Dhg0S

Score

7^/10

Malware Config

Targets

- Target
  
  efed45c31266b332f74ef2f2d5fcd6d1_JaffaCakes118
- Size
  
  1.5MB
- MD5
  
  efed45c31266b332f74ef2f2d5fcd6d1
- SHA1
  
  bc343fbf95c2371f140f08803c87a92842f2f2e4
- SHA256
  
  a14f7ad32763ab7aa0d3cf1bf8b3b3ef2fb52e2a2a2c903321412b717b402128
- SHA512
  
  113cbb817b601e2b0684791432e716331cf411da779561810f37476de84705e72610185a2f14d0825b068aa604dac0690b706a6a36c255a7f1c566d1c8dcfa62
- SSDEEP
  
  24576:1jw1dILPAX8ln6aB4WP3E29V8S4Dhg0fn2J6Z2SLqFQn9deCw/ooYOF22QtlbvVM:1jw1dILPAX8ln6aB4WP3E29V8S4Dhg0S
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  32KB
- MD5
  
  83142eac84475f4ca889c73f10d9c179
- SHA1
  
  dbe43c0de8ef881466bd74861b2e5b17598b5ce8
- SHA256
  
  ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
- SHA512
  
  1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
- SSDEEP
  
  384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  00a0194c20ee912257df53bfe258ee4a
- SHA1
  
  d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA256
  
  dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- SHA512
  
  3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/nsDialogs.dll
- Size
  
  9KB
- MD5
  
  ab73c0c2a23f913eabdc4cb24b75cbad
- SHA1
  
  6569d2863d54c88dcf57c843fc310f6d9571a41e
- SHA256
  
  3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457
- SHA512
  
  99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8
- SSDEEP
  
  96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/nsWebJPDesk.dll
- Size
  
  303KB
- MD5
  
  ee00c1bfd640df2ddd753e57bf3dda10
- SHA1
  
  c4585dd4a9e8eb68a035b021ad06436fd3c48f4d
- SHA256
  
  d464911f4a5b8488aa2e39fa4cbb1f98e24d30df043268573c0126be04d6b781
- SHA512
  
  e4665c726ff1d114aeb04962332b3b27cf7fa952a4f29923ea0cccce209ede801466178e7442d0a2ffa7e8a69bb26b8ada24b7a98639d4137eda631f56cc65d9
- SSDEEP
  
  3072:BivWsCitskrJiItRdykgT+WUqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk56:QCEs8J9dyPUqdKcS0Hwjl2Jw
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  jpborder.exe.tmp
- Size
  
  462KB
- MD5
  
  2c36df5d8e935b66ced03782217c2b68
- SHA1
  
  a060e7e9e6351879d94ffddb08efe9e27f38379d
- SHA256
  
  a1da971aa2855ae4a34fabb659bfbeb9cdebc4e8c57b6b818a1a3a7b4e1895ad
- SHA512
  
  0c354c9b459a245d482f0743713b7a6aa92daad8f0bc7cf88c7a4fc2447951bda6618ad510df054a3c8ede7b32823bd38416113d8c9ed46cd60116581f8a1c22
- SSDEEP
  
  12288:KjRKscog8PKbnj35HILe1Asjs8xDxSEM6uhx5:Ko2LPynj3eLhb0x4D5
Score

1^/10
behavioral11 behavioral12
- Target
  
  jpdesk.exe
- Size
  
  891KB
- MD5
  
  915deb1929c49a34278783eaa60ac8c1
- SHA1
  
  8b216d6bf4671795832ec521d0fdf08d081b4b81
- SHA256
  
  137d23863a942bf3c366521bd32466d984185eef2fbf7afac28d70af21c4e39b
- SHA512
  
  c21ebecde98ec5080ce74f21eeb54268d3ab915420f7a9adb35a6fcae56d6ff4858cdaf317b8bd44ef223afff971677fd8b9773b5262fe4d3b8071bc78864af9
- SSDEEP
  
  24576:MyzvzD37WlLWJjl85F3Zq8bcQwIk681HurgOkDCmirJ4q:MSz77WlLWJjpEccToOr0Cmi4q
Score

7^/10

discovery persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral13 behavioral14

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

UPX packed file

Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14