a58eb6df9eab33d850e6c28363bd1fe57fb8160ef1da3f5702b1c150d4bf701b | Triage™

Login
Reports

Overview

overview

8

Static

static

8

setup.exe

windows7-x64

7

setup.exe

windows10-2004-x64

7

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

avpr.chm

windows7-x64

1

avpr.chm

windows10-2004-x64

1

avpr.exe

windows7-x64

3

avpr.exe

windows10-2004-x64

3

license.doc

windows7-x64

4

license.doc

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
14a7e7b6675f0e39ebc9d0ea32dcfa3d_JaffaCakes118
Size 982KB
Sample241004-x7rbdssapp
SHA256 a58eb6df9eab33d850e6c28363bd1fe57fb8160ef1da3f5702b1c150d4bf701b
MD5 14a7e7b6675f0e39ebc9d0ea32dcfa3d
SHA1 8a3f33ca7fc6aa941dac6588d377e4490c9f659b
SHA512 9e6a0eba596f9f439d03f80c5748e86d79c12da659f7a913c3d2c60646794c1b3bfaca5f90b92112e87360c5e482680d61dd59f56261c0cc9af7c578f4aeb5cc
SSDEEP 24576:v7p3KgIE+sPHBllt3sRawnhvIQGlFgWSo:vF3nIE+yPsEwJ5q
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery macro

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

setup.exe

Resource

win7-20240903-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

setup.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/StartMenu.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

avpr.chm

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

avpr.chm

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral9

Sample

avpr.exe

Resource

win7-20240903-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

avpr.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

license.doc

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

license.doc

Resource

win10v2004-20240802-en

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  setup.exe
- Size 995KB
- SHA256 c64b3021b4190b508c350ba2538207d418945d0014a5467d1aec1ca76b3e9e91
- MD5 cdf558ffaa5c202a5084cc198300d975
- SHA1 2caa8287fa7a817c2529c185fbde29c8da6728da
- SHA512 4643ec7cd89b98e16a8512f9c59301b27bfaf38037745c08d60858fe04e1bb7136b2dc54bbf846ab54c8b6fe3f10c5e7251f02fe934025811d7277685aeed469
- SSDEEP 12288:ZHXfdUgIC+kZhpKiCQo4wqLWgg85A09ijarEnxJy+3kZuHGMzvPjkiW1:Z3mgIC+QvtlzRtTsjaQnxoHwmMb7
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 12KB
- SHA256 191fab998e58b66a2416873b06062166b547eb3ba06b1326a4a785a566aaf76d
- MD5 f407939127208a009b9a825cb77ed3c7
- SHA1 051d7fccf3fb544acaa8ab6be590bb4bc79cef82
- SHA512 d45d08823ac7667f071b21d238b7fda43115db3195a442cb17d880d147e8a930374403c970afc31f676f01a83fb9c63e3be047de7e16718a08a1fdbe4b690901
- SSDEEP 192:hzixixDOHhG9db9rd+oSVPECMlh3I8tqDyn/7hwbbHF1QuCb:hOx0DOHqrdwTY6+n/72bbMum
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 6KB
- SHA256 adf51f6f088f3bed7d88350cc77812d9c19a575ec0d477bbe6d744dd9cea06cc
- MD5 740bd475a180892e4cb98acc14cd360b
- SHA1 f71ea3c855d3a0f96c3dd1a2776d21fa273833c6
- SHA512 b8a51cd72acfdc3e589f5baa941537d4e51cfb6f73572f228651208aa89bcfd737beb7a8675e235fd0327a19516dbcd393fb8e6c5faee5a879cca28f46da840b
- SSDEEP 96:mLJdRZk8OkmE+WHw0FMXF6CWhFxKpKsWQhEfP0:mLjPk8OT30FFAzCP0
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  avpr.chm
- Size 81KB
- SHA256 4e0d342baa042e30549216de704063f17fd45a4b25adfa2a7fc47c72a27ec187
- MD5 648dc5220471c372ef641e8aae229dcb
- SHA1 e24c8c4d583c0f6a762b7e0fa6caa571d2f993fb
- SHA512 3138f5bd383fb0ee302083e498dfe08c2766dd0a9810026c16f385866acc02888b4bfdc108e4c80fdcb0028a396edc82ee9015ef1c9a6097bf0baa3e8224d3cf
- SSDEEP 1536:lz044HzcSNUm8e6Fk9+YOGs9SnFpaBL+rT3SZqMuZkZf99M8gE:J0ZTcSN4LFkSGs9jBLMTWuIQE
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  avpr.exe
- Size 829KB
- SHA256 e34065e5508245dec285ffa7711083e9079bda6119e6682688b44fc9eb7e1955
- MD5 d437018baa4619c20f492be145a716c3
- SHA1 7cebe76330f54d1c103d996227f41a8d1898b13e
- SHA512 706fedfc155e910f42081023bb586e1fa5b41ab37c0f1c52461ad375b06cae9f7c6065b5e083ca098a6889dd590a883cd2bff0f6bff02335efc91c5fe1947f1c
- SSDEEP 12288:JCJ0+k8KpKiq5olw/2WVg8GRpt9ijJrBn3rXGCocomgRSHsDrA:Ji0+HqKa8TtyptsjJ1n7To/D
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  license.doc
- Size 82KB
- SHA256 473ef7be81d23a4a0d16438418fc55f7390a4e81972f70babb03c9e28ed7273b
- MD5 ca88578c60be019c1e5831bd21e9e116
- SHA1 6f20cd388330df3b8b9fae02984a96360ab3d814
- SHA512 34ddd61eae152f6beeba7cf255b30864ec798609b60db7448d4aae356a67feea360267a5d015ccfd1e57cf54b3bdbae4f21c63bd0c72a2f164f3e44a37ac3110
- SSDEEP 768:ZzGr2/UQYOJTUUtTIWpS/0EQYge12/FB3HUpHUwEpn9nF1kVAomMHQGcEqUtCknB:BKQTfDVIpHKpnb119MeEvCq
- MD5 SHA1 SHA512 SSDEEP
Score

4^/10

discovery
behavioral11 behavioral12

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

© 2018-2026

Terms | Privacy