29fd01bde813c1b971846a9c8ef0244709c02b67d8e9e6e3b6da0aaded49fac8 | Triage

Sharing

General

Target

2f2a9ee5ceaccdd3efb6a100ba525559_JaffaCakes118
Size

1.1MB
Sample

241009-l3kghasala
MD5

2f2a9ee5ceaccdd3efb6a100ba525559
SHA1

8a69abda6b2f369ca34711ddeb742a89ea97ed3b
SHA256

29fd01bde813c1b971846a9c8ef0244709c02b67d8e9e6e3b6da0aaded49fac8
SHA512

5dae57e45660a1fbab25003fd0b992127ac523020b21a5c80fcc89747a7d1319691a2fd2041cfea8b437726f906d61190d6e831dad9f30d0c26b4b64c10f6a99
SSDEEP

24576:HhrMKYkd/xoAZOQ5suD9KRzTYsJNjHD4B5um4CVxCC5SzeKpNL:BTkAZOAdD2TbNDDA8mlqC5eeeNL

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  2f2a9ee5ceaccdd3efb6a100ba525559_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  2f2a9ee5ceaccdd3efb6a100ba525559
- SHA1
  
  8a69abda6b2f369ca34711ddeb742a89ea97ed3b
- SHA256
  
  29fd01bde813c1b971846a9c8ef0244709c02b67d8e9e6e3b6da0aaded49fac8
- SHA512
  
  5dae57e45660a1fbab25003fd0b992127ac523020b21a5c80fcc89747a7d1319691a2fd2041cfea8b437726f906d61190d6e831dad9f30d0c26b4b64c10f6a99
- SSDEEP
  
  24576:HhrMKYkd/xoAZOQ5suD9KRzTYsJNjHD4B5um4CVxCC5SzeKpNL:BTkAZOAdD2TbNDDA8mlqC5eeeNL
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/$_286_/ProxyInstaller.exe
- Size
  
  79KB
- MD5
  
  daa3ae34ea16a223ff55951400871e1b
- SHA1
  
  05a84be13481fcb8b5294941bd1fef6b77dca676
- SHA256
  
  85ddc4c07c608e1870680c5da98562ddde119b5acf08a2cb8b38e21a31475199
- SHA512
  
  ba623a0b64b85f6f844642dd8d2ce65d22459a4ee5e012b091b4ade0e39e4e60ab8f6fed162dd37916a6e277f518a694ccf46256ead75534c6efc685c8648da9
- SSDEEP
  
  1536:nVdePelp2Xy+tuQOzOYE5aXPngF8Vd5/ZAaiz67lEpd4:wweqOYEUXPnn5/Zfie7Gd4
Score

7^/10

discovery
- Loads dropped DLL
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/$_287_/BI.exe
- Size
  
  75KB
- MD5
  
  74cb7b0a801435c552d3bfd1517491a1
- SHA1
  
  a46e6e1b524a608eed9e81fd7e102e280b2e95c1
- SHA256
  
  fe0af5e14e37fd0b642aa08495ae63a4ed441c92909dfd7a8a25a050b5ed097e
- SHA512
  
  fce908fce3e9f84740280af53813bcbed29abf3f976a2b6ba1c88a722877ce020241b36bd0cbbb4f793df9d262b413ad30198bb1e8345128b0ac5857209b3260
- SSDEEP
  
  1536:wVdePelp2Xy+tuQOzOYE5aXPni9F8yggK0acQ2XzDv6:rweqOYEUXPni/v6
Score

7^/10

discovery
- Loads dropped DLL
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/$_288_/DownloadAcc.exe
- Size
  
  168KB
- MD5
  
  6a09cf3008e183e4c64f710416e4d9bd
- SHA1
  
  cd633b3b48484e3cb390f650e32ff1d3055854af
- SHA256
  
  b67158b12cf9616d9b22d0d557994ba2d56280352043fa17544e4f8e2cccc1b2
- SHA512
  
  93201474c6888acc0e0f796f06f02626064abbb7b9770715e17ef9a87a7fb8d951b019d7d9b9bb14ccf5da2368f5fe11b29a11e530baae1a89115e874684e77a
- SSDEEP
  
  3072:QweqOYEUXPn30DPFxFA/YcIaY0rFIMcCxOP+IxjkE8v1XRc:BEUXcbF7A/pHzrFIMd8+8jkEgRc
Score

7^/10

discovery
- Loads dropped DLL
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/BunndleOfferManager.dll
- Size
  
  339KB
- MD5
  
  f09bb97b9b8e2048fe562e78f761a0b7
- SHA1
  
  a7243e5768aea8717b22a6c7f0b144c5876dfe0f
- SHA256
  
  f65e438aa098d9e5742821763d355939724e923ea418ca7443439e7a409ba808
- SHA512
  
  430f4aa2945e366df3240ef96be3a1d0868383cb3a950cfe0b6fbf5fcd9cf239430900ae79bed3f55e15a50f365c8b021aa82c069826e96a355c8a7cfde66974
- SSDEEP
  
  6144:7yv0RMsT8lzZZOC4+OeO+OeN7VBBhhBBrXLsbg+vwzlTMw/8ZL8ITe:cYrAZOC4+OeO+OeNhBBhhBBzLsbg+vwd
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/Failed.htm
- Size
  
  6KB
- MD5
  
  4bca38bc78f5e8283655b1dda3d81b2c
- SHA1
  
  b1e61db910ebc37bcbf4650d773d727b15fc8554
- SHA256
  
  16b03f64adc522298a636a117869d821379e341314704a4eb7e2263689e76d91
- SHA512
  
  6b4559f2f658835ca3a5a8772f424415838990fd7b22ce9452577c6f1e92c8776fe8f25e2747e91dcf59b390084d82bc48f3bfaafb242c3374b0e98e81db3509
- SSDEEP
  
  192:0BA1WBLKOIIMwFTsVEuuzXLtnMB7QfOLCqaNhp:0yW9KOpsVEuuzXLtnMB7QfyDad
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/FirefoxHandler.dll
- Size
  
  36KB
- MD5
  
  297f686666aab3309cabc430199dfd10
- SHA1
  
  0e57ded3db82a5c6de284a6fa93cc38bb8834ac9
- SHA256
  
  6eef17cfaa4e4420f41a5e80c2fc49f4c1b8e44c8b648982c5cf5311fbd91dca
- SHA512
  
  39ba6a6523df27c9e4e5d764a6ddde8129bbf80800b4b660354307d2601e84ed0783a6c035c5c1411a12177f95617db43d7ae2f3b0a2f5389d4d2681276196ac
- SSDEEP
  
  768:J92TwvrKHG8lvQdxk/+IX19elUSrMQLisawIUqoULdAOfK+2+ZI:X2kvkyxkWIF9elU1+ALWOfZZ
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/OCSetupHlp.dll
- Size
  
  842KB
- MD5
  
  5b8d0d2cd9d60412262f166e15357961
- SHA1
  
  cab78c31f513d1f2bf43205af88a3bbfab11b1ca
- SHA256
  
  2c028b33da28063270a7c4f7f8affafdea63a766627178cb166253f14f3a4c4e
- SHA512
  
  e4a05b5479c1b9edc49d36356e1a7e212cc100f11d600bae8d6303a6c1e1ed329c10eaa1d5228860d3a7999147bc8c920c07f3acaf197f1b8df955a583c7230f
- SSDEEP
  
  12288:b+wnK6z+X9XgFnDgQlOpmtZkYZYiWRREaQDEK/8MoSTLyrQCT30:iTdwZDgQ4p2ZkCYHtQIK/8M7TLyrQe0
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  17KB
- MD5
  
  a4f38d1c7a480f5da1bb8097b8b939db
- SHA1
  
  b3129c2a0e61881381463f5e0cbbffa573daa845
- SHA256
  
  e1180e1e3344c7536150275e33de53dc1dd1a3ca03be66c4d4875fe5bcd4e436
- SHA512
  
  fed89f7ee9364fc2f4b9f82c4563713497043947e98dbb03e7d755681adf3ae661aba80d08e59988a23695fc64481b69d9842b7ec7d2b572cc872c4c9957febc
- SSDEEP
  
  192:WN2gQuUwXzioj4KALV2upWzVd7q1QDXEbBZ8KxHdGzyS/KxKb+nYe+PjPArJUxVy:tJoiO8V2upW7vQjS/0nYPLWUHWteMy8v
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/execDos.dll
- Size
  
  11KB
- MD5
  
  84eac2b0da307a3b0d17c35838d8e7ee
- SHA1
  
  ea472569b5d8c11132fac266f5e340300a33df76
- SHA256
  
  bdc28057be0a9e5b4f3735197a382680f646c1bcadb18fcdb6bed0caf6bcad31
- SHA512
  
  8f6c662b2de6ff3a306f2024a127e0eb79f8160dde7bfbc00095e25e0e2d905df8c291f854fae40005718478eac83db5f4622a40f7b8600ac19255b37dadfce9
- SSDEEP
  
  192:Wx9pJ7jQs5toD6Cln/6tt19nYe+PjPArJUxVl+vlJar9ZCspE+TMQrs5R:WJtGblEnYPLWUHWteMHR
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/inetc.dll
- Size
  
  29KB
- MD5
  
  dccdcb124064a1d9a5eb12232348b898
- SHA1
  
  f294fac154cb1c6c18fe054ac584f767594b93fb
- SHA256
  
  37adc0183d94ae6ca1895643423dac0c97750d7103e6b00c14299dfc4ad2271e
- SHA512
  
  bd89bcd513bb7120db80e1115b4caceaa18c4ea863fe29b232002d447c3813133ff2849fcb2d4df45e3ff67e0e0d9d340d61060b9c74045b17efa5b1c1f5b05e
- SSDEEP
  
  384:c4Z8sUAUNuGGsPVPEZ+OLkCnFJDhgvZwcRa9h9S4y4fO7nYPLWUHWteM9Ms8:cG8sUAUnt88CFJDhmajMAWtsP
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/nsArray.dll
- Size
  
  12KB
- MD5
  
  6c41b7846fccb6edbbeba7ae13abbce2
- SHA1
  
  eebf8ef6bc529262ed9b0b38f21e49af243b8d75
- SHA256
  
  072086de8c1d354733b4f3555482656728e0a26be715e76b90c3a71faac7f8f6
- SHA512
  
  8189f41c564cb330c0f4c4b73c53f41c924a54914a62e80885451643d8ed7a3d7c5b6f7cd4b2a88a83a2ef1b6f063184812c53dda398eabd3508dd0ea02044de
- SSDEEP
  
  192:OaNHOZqWdn+/a4YZkv1uULW1C4w2X2bMsj/nYe+PjPArJUxVl+vlJar9ZCspE+Tf:OQudRQaYAU6hXUnYPLWUHWteMu/
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/webapphost.dll
- Size
  
  760KB
- MD5
  
  ca7f07bcde734c3a3072841e412c45e5
- SHA1
  
  75c03a7b14b2827242447fec95e4869a76518747
- SHA256
  
  54c6ca5ddcc600bb6ffd283760b843cc0af41b7b9ea1767a9aa4826262c407fc
- SHA512
  
  2f134f85aaea11eb4dfbbda62efe1ce45c04781da5fb138231c2f62578c80a5cd9cbe45c901fd15c5a85c86f49f70ecf5cd8213e9784bc888f8581c8850ced1e
- SSDEEP
  
  12288:Q0liibTLW8aqfoiauUz/tnKSNyFegAl1lSFb1zOvtyPjJwaAW:Q+lMZiauUz/thsAl1lMBzwYPjJRAW
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/xml.dll
- Size
  
  124KB
- MD5
  
  8123bd4d3b32b352c4651d89d6597d88
- SHA1
  
  1655ae3b35cf3ed2dfa0a1212c6fd5c444a52d9c
- SHA256
  
  288a66549f2699eba1010c5ec989f546a1381411413e56f12b3dc6c5eb6694d5
- SHA512
  
  13a45cb9df3c062f473d0b7371370b24d7355aabe688254d93b4f7474264c4d79fe945591947765e8477db664ad00e132f247499cb64949f0378481aa5c0ba60
- SSDEEP
  
  1536:S2A8OSGjylgkara+70LICin9zgtg2LxowhtJu6MqSNicNEtIfF42q2KCZC:8zjLkarn7O+n9z2L6whFtGF42bKcC
Score

3^/10

discovery
behavioral27 behavioral28

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28