b7cea878ee64815a8c929cc47d75631503b78359c129975e43dcef5969607408 | Triage

Sharing

General

Target

2a60e300c9758386b222b91120a89096_JaffaCakes118
Size

2.1MB
Sample

241009-egntgatbnr
MD5

2a60e300c9758386b222b91120a89096
SHA1

9cde4149f5b2f494ca4df2d5169b256f91874e04
SHA256

b7cea878ee64815a8c929cc47d75631503b78359c129975e43dcef5969607408
SHA512

1fd626a79278440919198201a4fe38f4013b83717e0cd509f20688d35df7f571254ce8b9a419add79f79c2d16f504c41374e259761b0a7e6b98cd58cb51fab7f
SSDEEP

49152:qxRqQY5hW5UsUvrXhAEAXL2VbTY5hgoDkCGl8ZCXB1YKg7O2S1:qxRqdWavjE2Vbc5mzzQsB1YKsY

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  2a60e300c9758386b222b91120a89096_JaffaCakes118
- Size
  
  2.1MB
- MD5
  
  2a60e300c9758386b222b91120a89096
- SHA1
  
  9cde4149f5b2f494ca4df2d5169b256f91874e04
- SHA256
  
  b7cea878ee64815a8c929cc47d75631503b78359c129975e43dcef5969607408
- SHA512
  
  1fd626a79278440919198201a4fe38f4013b83717e0cd509f20688d35df7f571254ce8b9a419add79f79c2d16f504c41374e259761b0a7e6b98cd58cb51fab7f
- SSDEEP
  
  49152:qxRqQY5hW5UsUvrXhAEAXL2VbTY5hgoDkCGl8ZCXB1YKg7O2S1:qxRqdWavjE2Vbc5mzzQsB1YKsY
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/Base64.dll
- Size
  
  4KB
- MD5
  
  f0e3845fefd227d7f1101850410ec849
- SHA1
  
  3067203fafd4237be0c186ddab7029dfcbdfb53e
- SHA256
  
  7c688940e73022bf526f07cc922a631a1b1db78a19439af6bafbff2a3b46d554
- SHA512
  
  584ae5a0d1c1639ba4e2187d0c8a0ac7e54c0be0a266029c4689d81c0c64a7f80e7d918da0df5c6344f9f7a114f30d8f2feda253b29e813bae086604731a3d8a
- SSDEEP
  
  48:SxSrr7xd14m4bLKwvnvcfDw1hEiauGkDVK+hIg4qT9/3lt:zr7xd14m4qw/vGwrEickDVthcE/
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/BrandingURL.dll
- Size
  
  4KB
- MD5
  
  71c46b663baa92ad941388d082af97e7
- SHA1
  
  5a9fcce065366a526d75cc5ded9aade7cadd6421
- SHA256
  
  bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
- SHA512
  
  5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  0dc0cc7a6d9db685bf05a7e5f3ea4781
- SHA1
  
  5d8b6268eeec9d8d904bc9d988a4b588b392213f
- SHA256
  
  8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
- SHA512
  
  814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
- SSDEEP
  
  192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  00a0194c20ee912257df53bfe258ee4a
- SHA1
  
  d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA256
  
  dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- SHA512
  
  3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/blowfish.dll
- Size
  
  22KB
- MD5
  
  5afd4a9b7e69e7c6e312b2ce4040394a
- SHA1
  
  fbd07adb3f02f866dc3a327a86b0f319d4a94502
- SHA256
  
  053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae
- SHA512
  
  f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511
- SSDEEP
  
  384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/inetc.dll
- Size
  
  20KB
- MD5
  
  50fdadda3e993688401f6f1108fabdb4
- SHA1
  
  04a9ae55d0fb726be49809582cea41d75bf22a9a
- SHA256
  
  6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
- SHA512
  
  e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8
- SSDEEP
  
  384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  HtmlView.fne
- Size
  
  224KB
- MD5
  
  5119e853bf543fa2ef978d758cfb0819
- SHA1
  
  13541a62b63d019381a0e15b944c9843e88dc5cb
- SHA256
  
  8640b2a172680cd62a73baee98eed73de8059a21a5fc21e398bf81a8ab31eaaa
- SHA512
  
  ae8f9be5ae53af0594f48c119937ce8482bb3fdc4fb48a1fb6fcd9d8896acbc9a4eafe4ba0e02059953160665b8de767483b06e15703b97cf82fb52dbebc2799
- SSDEEP
  
  3072:hRQoIQRPT7Cz9umvcv8Cyex7aUYJeIVL/IFINHb8WjoPNH3+1hAdS4P0u4X:R/FMcv8ux7UdsgmYHqGX
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  MCI_CMD.fne
- Size
  
  9KB
- MD5
  
  749343e1749c1b37128c62d2d9b431b8
- SHA1
  
  56d4e9bf558b4bfa2ce9aefcff1c02fa9f0b3188
- SHA256
  
  4eda148fa29b4f34740288c1b11a6ef5818a031b4049cc0e5fbadbb49025e0b3
- SHA512
  
  1214c7849b299dbf113f0cabfdd12359b38859601a4045b4737db70d4e4f87b7da61f944244df2115c491a505990f3cdeb0bb48798d6799ec2259297d2271fb3
- SSDEEP
  
  192:zdy78FRZPCdDJC3KpL2+DI/2k7mMn80Nb/cZq2UNSIv:zsAFeyzqI/2k6W7bj2UIu
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral17 behavioral18
- Target
  
  downlib.fne
- Size
  
  240KB
- MD5
  
  f88ff2d5a81f04d6322f5c6df84c528d
- SHA1
  
  dfbbb249425802ccc9a9d49fc7860fcddf29b736
- SHA256
  
  c286860a68b627a47780b05eaf07945b827b3f7095ed7def46ae6e498658f423
- SHA512
  
  de0c51868be44a0a6319f965b9b030a40ca1295ff3e1870fb3bf1f6a532bfed1d69f9817515ea02f21a667c8bbac05ba514c2d64e2ead6235db447ec1d479177
- SSDEEP
  
  6144:n5s2CzBW8BSIcfN3o2uX5Xtl4PTensXKI:5sNzA8g82IloensX
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  dp1.fne
- Size
  
  124KB
- MD5
  
  7b1466328179edaf7110f3647703e149
- SHA1
  
  87789c50bf0a0a6307f6d7b0a2e71f845ca29fbe
- SHA256
  
  00e3adf34790c3d01bbbea71db4ddd824999215d910a69b0e36cb2ce55501ff0
- SHA512
  
  b4c1779f7e81f2b78d0fb3cf73cf4c4ac7670bcce4b9e066713eea7f2f78991ef770ee04662574fe8ae7646113605c20cfd0d88296354aebd7c1fb9790cf45b5
- SSDEEP
  
  1536:CZZhM+fWvw1CEb18ANf6T/BLL+UTMoV51oJN2w:CZZu4WvjEbTkLlV51oF
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  eMMedia.fne
- Size
  
  280KB
- MD5
  
  4fcc96ca8ee1303f7d451f0e2aa06a67
- SHA1
  
  281ab45028feea76787ad790df1b39c2d05e6d69
- SHA256
  
  0156f17168dbf24e34b27d05d885392eefdd38b115bccb596c2b94e240124f3a
- SHA512
  
  3dcfd0f9c9fdb4189cd03d0e1633a6de8cb20404f1113cf09bd8abd4ccc088c02ef69ae3ba57c86b9642082aacdbcca89733c1acefaa2e4eb02563aa7d25cccf
- SSDEEP
  
  6144:7bgeGjcxwA+4hTltYvY1K6v+p6giGDBrc8:fg2U4hjP1KW4Brc
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  help.htm
- Size
  
  4KB
- MD5
  
  28f5f621492a0ef19ec2e86602b52286
- SHA1
  
  cbfd6425e62adda8b67603cb0b35319cd4a784a0
- SHA256
  
  07ade4682eaac38a7a200af264ed3074cfc3b1df97fa4b75ec8794953df34a02
- SHA512
  
  aa3254b6d5fecf90331c2c52f33162b021667f3335e774ab2fbfec1a676ef9e0702c8346c6568025ea5c220a91401be697d0186efc2c492a1e60611ab67503f0
- SSDEEP
  
  96:U7JczgWQtDd1dddddddddKdddddYddd2dddd1dddddddddddddpddddddddddddm:+6TQvtfLKh0
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  iext.fne
- Size
  
  280KB
- MD5
  
  6bf292ac4dd91bca63c2adb76b016c09
- SHA1
  
  373b43cda587f3bd927e8d5c51cc44ff549b6406
- SHA256
  
  234502e28a38a5317768bb0be3016c44ce82d29cd26ddddc63f46684c0c34c03
- SHA512
  
  786ce6ce5da91e2fad24394e079b4b9fa54784b14ecc231af5cbbd87c7abeccc2a3c1ac5c4fb5aceeadf771c74eb62618f75e2a87bfbd4e14de7cb8727a0809f
- SSDEEP
  
  3072:WKp+f2fFJknXICZG+WWKekQX2mli88Z3wXfDot+ugEoYSayM6ueJsueqwXlxYozm:GRPZGVWT2K8Z3wXs+WEueJsueqwVg
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  iext.fnr
- Size
  
  212KB
- MD5
  
  c57c4352fa548c4cdf2e4154e29a7c48
- SHA1
  
  4584037b8d24e36e950b490243ff4188831b0341
- SHA256
  
  75324f60caa76f8e0404574a0b2dfc2dc87ae2847791e231baae6f6659267c58
- SHA512
  
  88df7138f346a25ba73ad03f71345d141244babe60a2fa0a7588bb5e153df8d54ca404d4bcf0969a7f5db76f94c7ff8d9ab0de58c4049debbb2ded562e186ab1
- SSDEEP
  
  3072:xWPuwXn9uSjSZSzy4aA0Hav+BeHy7Ily/xR4xUZom5Nzaglxd213Z:gzxicHgn4mzdjS
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  iext2.fne
- Size
  
  264KB
- MD5
  
  fdba881ff381179884bdeb30386d135d
- SHA1
  
  df11cd65ede073fcc3466eaa0c5f779dba1ea545
- SHA256
  
  1e56ec7b355059f07864b831c01b4e870f25c8f3c6dbb9fcf3f1990298bd1ac9
- SHA512
  
  9c28807159a3590a9e0e1e1fbf4d15f4b424ec5eda05488869ec3894f1fe2fa613c60e7a1258395c89c387452fe9bf633863bfe7965e594921526870b97d01ff
- SSDEEP
  
  6144:CsWhDg80Ouo+EEDx7uXJ7FCV43K1Dug0:C9DHr6XcFV3mu
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32