6278156553ce26bbc3823de753ee82594701be867ede9b97d852adef98652b46 | Triage

Sharing

General

Target

164aae0ae02ea76e8547a5b4b1701e5c_JaffaCakes118
Size

2.2MB
Sample

241005-fvmc8sxdll
MD5

164aae0ae02ea76e8547a5b4b1701e5c
SHA1

fc14db72681c9b701386ff442b70648b79f17a32
SHA256

6278156553ce26bbc3823de753ee82594701be867ede9b97d852adef98652b46
SHA512

b3d0038d79b1b3f90c55c70531c2cac3d4489e79e1d4da7cc08ce0a06e5ba14cddf038a5b7b632426779a5907a95ce9ea1ac8c20d513143e938b2d78c72ccd56
SSDEEP

49152:AEaVFO540EC/uHKveO1OKX6WxulUA4Ugzuep0CwZhey+eEhu5HGkEMWEClyEzu:AEaVy4C//eO196z4Uaue5wZhereCj1j+

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  164aae0ae02ea76e8547a5b4b1701e5c_JaffaCakes118
- Size
  
  2.2MB
- MD5
  
  164aae0ae02ea76e8547a5b4b1701e5c
- SHA1
  
  fc14db72681c9b701386ff442b70648b79f17a32
- SHA256
  
  6278156553ce26bbc3823de753ee82594701be867ede9b97d852adef98652b46
- SHA512
  
  b3d0038d79b1b3f90c55c70531c2cac3d4489e79e1d4da7cc08ce0a06e5ba14cddf038a5b7b632426779a5907a95ce9ea1ac8c20d513143e938b2d78c72ccd56
- SSDEEP
  
  49152:AEaVFO540EC/uHKveO1OKX6WxulUA4Ugzuep0CwZhey+eEhu5HGkEMWEClyEzu:AEaVy4C//eO196z4Uaue5wZhereCj1j+
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/DLLDownLoader.dll
- Size
  
  28KB
- MD5
  
  0d613461983c6a2ed1be2e57b67e3ec7
- SHA1
  
  274e134bff3a1cc2b15b84f5c7d42f039ce0504f
- SHA256
  
  cb0b9edbf618082037aee9c618a7e28da3f66fa01210b425c08ddacd65bdc44c
- SHA512
  
  cbf8f2d9612740ab697ed495011cd7ffe2a6873f229374c0d0bc034bdfdfe07d5f65d8f6b6835db52ed8c133bfe141ff5bf08c23065902701cfa90c468b8911d
- SSDEEP
  
  96:t+RBpCB8OnNWxYeUXiJsVgcAOErirmYDi1w32wJVoilgtxMTuRQTGo1Qlo:t+RKDnYUPScymr1lGwJigaxMTZTNGu
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/DLLWaitForKillProgram.dll
- Size
  
  28KB
- MD5
  
  9c4b8ec42d89f7557bfd90798ce52787
- SHA1
  
  2376dde426ea65aa27c30e304086310605382475
- SHA256
  
  ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
- SHA512
  
  17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
- SSDEEP
  
  96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/DLLWeb.dll
- Size
  
  28KB
- MD5
  
  b382d6c8d5c6a437b2064d79b5dee47b
- SHA1
  
  f8f4eae50d59b3b94762b10984c1fdcf4c08ff47
- SHA256
  
  bdb051e1d7fd7b062341b8cb2efce180f2fbb83739fd2143262034be0f2396f3
- SHA512
  
  e6d604d18b28beb30c09d987472540306abd925048f58a3c99a4013d44b9f29112419ca15c1bb7ee1560300bf179f9e98dd7e6db75e5aeb0e44fba47ac2dcc99
- SSDEEP
  
  96:rP3KIyqFIAedN/0AatJ/l7R6TxNFOUodK8X9/r+uFBudGaxfP0:rP3K79N/HatJ/36T15jcAyYdbx3
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/ExAddPage.dll
- Size
  
  164KB
- MD5
  
  e8aa85f60fe484ec6c576ca1a740e2e5
- SHA1
  
  2c891f1fe56ef12bfc2fb6c38a04bb77430406f5
- SHA256
  
  8449a12ced89215245ccb55b6b7693e2c6ec1acb06a28597f4a8f19a12dd32ba
- SHA512
  
  3823c421bce33a99ea1a80dec409b36bf41988c86cda97f93f065b57aeb7177dcaf35063c22c014ad275293722095a8f02971bbccda212f223d761ef1aaa5b7e
- SSDEEP
  
  768:d/RkQss0Ikxfo2GMeydrqdq/LFAurfVVjnK8Yx+jkmTbTTTTTTT8uvTgTWCPZ5:ZRkQss0Xxfo2GMeIqdq/LFAIfVG5PZ
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/FILEDownPlug.dll
- Size
  
  20KB
- MD5
  
  b118053825642ecf3bba36500a70645b
- SHA1
  
  ce436f731bd8bf744399bf39e77f7bca5a4461af
- SHA256
  
  eb97c0e8d17986beb01c1366405c8fa70e5d69c5f82b30f184454a47c258fda5
- SHA512
  
  11e00d2e2fc6b85e96de5b9fd11ea3f1d681180879ac3c2a7cfbe35a3808466f8eaff70faa39d6f5739238a34558825a22f0887d5653df54305a3ccce3836c73
- SSDEEP
  
  24:ev1GSPqbz/ZPQ9/4l4V91gCKoEbWOSrcde:qQ/BQ9wWhH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/ISCHECK2.dll
- Size
  
  48KB
- MD5
  
  408dd8f636aa981aee54680d7b3823b0
- SHA1
  
  279d57cb450e8f523e2b42461e96aeec20116a87
- SHA256
  
  df74e680cbca9c3debd520c3b05291a40f4d579a64e71a49e41f588d58060c16
- SHA512
  
  2a44ae2d957e23d34fc3b2b6661c11d0c19eaabdb18dde9f392c03808d4f4c44b6dfe3e06b64aa350a0e947d05c83e4c7380ee4c4eec221106c03dd22e5f0743
- SSDEEP
  
  768:MSLHDf9yTTh0y1ziVJarqwi0w4Kc1Jcl5d/vtxD:MuyTTyy1u7H0wqclH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  eef9e469e8a30717974499f277d97e2a
- SHA1
  
  2d33c25984ebd9116beeb55cdde4c5c86c023e5d
- SHA256
  
  1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
- SHA512
  
  d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
- SSDEEP
  
  192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/IsVista.dll
- Size
  
  44KB
- MD5
  
  344d13fd0fdd2d97e8d61960f40a8a30
- SHA1
  
  3f0f120203005eea3e8ed1652a6ea8a607ea934d
- SHA256
  
  17bb3331e2300aa01666fbee98b9552cec5e46212a4c5a340c0370b93df88f83
- SHA512
  
  b4e49c58503532e270cc369f1cbd14d85edd46da5ab034dad730bd4297887dd541d445d2fbf205820e6afbbdba7ab6d5b78b694467554320fd6db8e06fe4f719
- SSDEEP
  
  384:x4MHyTfkIbqaddF1qabhJfl7Tisz7c7t3TyAvdjWu875USXdvlHZYklIsg:FSTpbqaLfHJflCszOTbdjWR3Nvl
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  36KB
- MD5
  
  6958016193a066833556992077bad4fe
- SHA1
  
  5f564945936f99381d7e2408f034f97d069005a4
- SHA256
  
  f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
- SHA512
  
  fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
- SSDEEP
  
  384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/SetHoldData.dll
- Size
  
  96KB
- MD5
  
  e86d36c5332858061cc519e7bb558f39
- SHA1
  
  8114e43152797296ec1919b1c713ebada661ca51
- SHA256
  
  4c8869ff8cbdd2f9a6a2d2876194869664d0e3f554886451224ff4e732136365
- SHA512
  
  46bf19a71fe2ae4d61084bcf406604e2f375c92f5de1a5e9a6eb857424eb4dc82e70ae7099aa3676c518960f78a17dafa05c23e5283954e43f44190391662ed1
- SSDEEP
  
  1536:WLWIcTAacVyVg+h1hT9Uh+uQNIIhVQoJadWytgYT+j:4TlCg+h1xr9IIh+oJadrb
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/UserMgr.dll
- Size
  
  55KB
- MD5
  
  130f66c0161e6da46744abe3c0be4d9c
- SHA1
  
  d2a44a0cd07bc0c5d81fc0d056d6d45d200896ed
- SHA256
  
  955705c8c7188d06af16849e5cc3ceae79ea5d0808cc2851630a54d54bbc01f2
- SHA512
  
  915b9135da230ec8d3016ba83bd7102b3f8cb13050189a176f8d4d50363f13584fb971226458bc493cd2df27723c8ab7273effab7d6c6e14d49e735d24d7fac8
- SSDEEP
  
  768:fThBSJtwQegACHpCygw5eKeK/B/viiTRvTkujLWf2UEHzDSZA7yM5jt/BJE4lV:7SCQeLCHpCyNV9ZTRbkuOQzyMVt/blV
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/nsExec.dll
- Size
  
  6KB
- MD5
  
  cdff6b8f9523b6ef9f20fb5f9e90f1a5
- SHA1
  
  b25f6e0a19b41ff0a12de8e98e3005bc119d34fa
- SHA256
  
  80b2740fb3a21ffab022a96ce6b420019072f8ef3a048fd9dea4a5b64498c0c8
- SHA512
  
  62585c6a6103aed10f9a79c016df8cb630c3e37715542b5f26aa1a910771540c9b323ddbba3329db0ecf524143f7a27b782e198ce944317f764be6b9d04b792e
- SSDEEP
  
  96:W7GUb+YNfwgcr8zyKwZ5S4JxN8BS0ef9/3trCUTMxVXw32E:IKgfwgcr8zylsB49lrCUTMxVX7
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/processes_second.dll
- Size
  
  140KB
- MD5
  
  f0a1eae66dd2f54fbe26c26db5493a6f
- SHA1
  
  46d56b4c6694da1ec4d88b0a5b153dad02b5dca7
- SHA256
  
  8fe4dad8f894bcdb9a83a9d302907de404695be4b50e619afd88f09d72583e69
- SHA512
  
  e1b3c946e90fc30b6cdf953c8c7e96121b462bf8529099e0587f7f243b9d73eeba52b510dd2598937f188f7a35bc1e3785b7589ec6c249996a5795c10dafd1e7
- SSDEEP
  
  3072:F+WSoWifAbFBgChOQcNg3kirQDNgv3gp9Ibzls8:iAAbFBgChOzNgUrDNgvgp
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/stack.dll
- Size
  
  10KB
- MD5
  
  0f61a81a543822de5fcb9a8a43f230dd
- SHA1
  
  d01d4a0f542f3c654637fdfe5a574fe1f150ece1
- SHA256
  
  46b4a72ae8590b0afb3304cc5c13db0502bc4c4cb02f64f37c79008c17db814f
- SHA512
  
  596b7a897ba64c32e26ba6168aa3628aad37b187a9814a286298307d8c42eabf8e8a679dbda558f8b2cdc8676c94ec819256432aa5ad7c05a5387759262a4402
- SSDEEP
  
  192:VBEc/BwQV5gTRk6uIu8uQubQuNu3fufuXuPDyuSuFujournu6udkuUuw0y9UrVo:VBEwBZmx97TSefeC/zIqoInvEkJ8y9x
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/xml.dll
- Size
  
  118KB
- MD5
  
  42df1fbaa87567adf2b4050805a1a545
- SHA1
  
  b892a6efbb39b7144248e0c0d79e53da474a9373
- SHA256
  
  e900fcb9d598643eb0ee3e4005da925e73e70dbaa010edc4473e99ea0638b845
- SHA512
  
  4537d408e2f54d07b018907c787da6c7340f909a1789416de33d090055eda8918f338d8571bc3b438dd89e5e03e0ded70c86702666f12adb98523a91cbb1de1d
- SSDEEP
  
  1536:U2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KC:OzjLkarn7O+n9z2L6whFtGF42bK
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32