d44968b1ab1f7f8b1bf14e353ce73c8ae901a3b45ecdca219d2ac49df009e0f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

434d6dec0d22952f7b06f358e028a3e2_JaffaCakes118
Size

585KB
Sample

241014-vth2rawfjf
MD5

434d6dec0d22952f7b06f358e028a3e2
SHA1

2be3bf0d6abe7413bf5467bab48a800c06a26e42
SHA256

d44968b1ab1f7f8b1bf14e353ce73c8ae901a3b45ecdca219d2ac49df009e0f4
SHA512

fabc64787a81dc8a5db5bcc79d7bc1e2ccbb07cf7eaa363155be560a118ded9b5faa02c720275cf99d4c163c2fb9e956c8551ee7a82b691b0899e15bec0c48ef
SSDEEP

12288:jNMvd8jVv9DgNTF2pPYyVJqi0vv7NFJh2bx3rCzpSH55W:pod8pxgnzYF0bNrA93r9H5k

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  
  434d6dec0d22952f7b06f358e028a3e2_JaffaCakes118
- Size
  
  585KB
- MD5
  
  434d6dec0d22952f7b06f358e028a3e2
- SHA1
  
  2be3bf0d6abe7413bf5467bab48a800c06a26e42
- SHA256
  
  d44968b1ab1f7f8b1bf14e353ce73c8ae901a3b45ecdca219d2ac49df009e0f4
- SHA512
  
  fabc64787a81dc8a5db5bcc79d7bc1e2ccbb07cf7eaa363155be560a118ded9b5faa02c720275cf99d4c163c2fb9e956c8551ee7a82b691b0899e15bec0c48ef
- SSDEEP
  
  12288:jNMvd8jVv9DgNTF2pPYyVJqi0vv7NFJh2bx3rCzpSH55W:pod8pxgnzYF0bNrA93r9H5k
Score

7^/10

discovery upx
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/ButtonEvent.dll
- Size
  
  4KB
- MD5
  
  55788069d3fa4e1daf80f3339fa86fe2
- SHA1
  
  d64e05c1879a92d5a8f9ff2fd2f1a53e1a53ae96
- SHA256
  
  d6e429a063adf637f4d19d4e2eb094d9ff27382b21a1f6dccf9284afb5ff8c7f
- SHA512
  
  d3b1eec76e571b657df444c59c48cad73a58d1a10ff463ce9f3acd07acce17d589c3396ad5bdb94da585da08d422d863ffe1de11f64298329455f6d8ee320616
- SSDEEP
  
  96:hrA2+5HGZFYJf9D8IjDflDCoMzncsGSmE:hE2+5mMJfJ8v1zFGSm
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/License_DE.rtf
- Size
  
  7KB
- MD5
  
  858d50016b5091a71bde743798e4fde9
- SHA1
  
  80fe9815569fab908af407db0b0c386ee5fb0499
- SHA256
  
  0d121347542face1889918432c70ce29e0fed3f53a837c9d03c9a73f49ccc834
- SHA512
  
  2fa1080a2d667629fe2862075855b6ae1c6b4e592fc2e119f2775fb1ede100cbe9efd5252241b6ee4eddf8925d99e1751f06c0c3f0ad2290f489e0caaac7fce2
- SSDEEP
  
  192:YfMZT9jNvNThXsR00Ao2dyTSWOrrgSRfM6+QxFHYidArvNK3pCnLPeWVRX2:X9jxBhXsR00odI1j6Hb8vg3pCLP1VRX2
Score

4^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/License_EN.rtf
- Size
  
  7KB
- MD5
  
  858d50016b5091a71bde743798e4fde9
- SHA1
  
  80fe9815569fab908af407db0b0c386ee5fb0499
- SHA256
  
  0d121347542face1889918432c70ce29e0fed3f53a837c9d03c9a73f49ccc834
- SHA512
  
  2fa1080a2d667629fe2862075855b6ae1c6b4e592fc2e119f2775fb1ede100cbe9efd5252241b6ee4eddf8925d99e1751f06c0c3f0ad2290f489e0caaac7fce2
- SSDEEP
  
  192:YfMZT9jNvNThXsR00Ao2dyTSWOrrgSRfM6+QxFHYidArvNK3pCnLPeWVRX2:X9jxBhXsR00odI1j6Hb8vg3pCLP1VRX2
Score

4^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/License_ES.rtf
- Size
  
  8KB
- MD5
  
  1a266545a4c4d17fe384d1ec4cfa2988
- SHA1
  
  cd7fe0f6344e7695102b060e2f7c0e65b2290ab1
- SHA256
  
  5eb6766f26d441567f42a956fd93ac0f99fc9e5abf8269240827a8d5ece61c13
- SHA512
  
  82f6ddfb7c94f158066f3fe7657ac3bad9cae4f0eedee24954436633780083e84b30d222c1dfab721a967d9a6f3c053d4c6122948c9304701b4d1af2626ee8e8
- SSDEEP
  
  192:YfMfBroyGjQxyRPfuf4XxgTeqilSRMXy2:BBr/GthR+d2
Score

4^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/License_FR.rtf
- Size
  
  7KB
- MD5
  
  858d50016b5091a71bde743798e4fde9
- SHA1
  
  80fe9815569fab908af407db0b0c386ee5fb0499
- SHA256
  
  0d121347542face1889918432c70ce29e0fed3f53a837c9d03c9a73f49ccc834
- SHA512
  
  2fa1080a2d667629fe2862075855b6ae1c6b4e592fc2e119f2775fb1ede100cbe9efd5252241b6ee4eddf8925d99e1751f06c0c3f0ad2290f489e0caaac7fce2
- SSDEEP
  
  192:YfMZT9jNvNThXsR00Ao2dyTSWOrrgSRfM6+QxFHYidArvNK3pCnLPeWVRX2:X9jxBhXsR00odI1j6Hb8vg3pCLP1VRX2
Score

4^/10

discovery
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/License_IT.rtf
- Size
  
  7KB
- MD5
  
  858d50016b5091a71bde743798e4fde9
- SHA1
  
  80fe9815569fab908af407db0b0c386ee5fb0499
- SHA256
  
  0d121347542face1889918432c70ce29e0fed3f53a837c9d03c9a73f49ccc834
- SHA512
  
  2fa1080a2d667629fe2862075855b6ae1c6b4e592fc2e119f2775fb1ede100cbe9efd5252241b6ee4eddf8925d99e1751f06c0c3f0ad2290f489e0caaac7fce2
- SSDEEP
  
  192:YfMZT9jNvNThXsR00Ao2dyTSWOrrgSRfM6+QxFHYidArvNK3pCnLPeWVRX2:X9jxBhXsR00odI1j6Hb8vg3pCLP1VRX2
Score

4^/10

discovery
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/License_NL.rtf
- Size
  
  7KB
- MD5
  
  858d50016b5091a71bde743798e4fde9
- SHA1
  
  80fe9815569fab908af407db0b0c386ee5fb0499
- SHA256
  
  0d121347542face1889918432c70ce29e0fed3f53a837c9d03c9a73f49ccc834
- SHA512
  
  2fa1080a2d667629fe2862075855b6ae1c6b4e592fc2e119f2775fb1ede100cbe9efd5252241b6ee4eddf8925d99e1751f06c0c3f0ad2290f489e0caaac7fce2
- SSDEEP
  
  192:YfMZT9jNvNThXsR00Ao2dyTSWOrrgSRfM6+QxFHYidArvNK3pCnLPeWVRX2:X9jxBhXsR00odI1j6Hb8vg3pCLP1VRX2
Score

4^/10

discovery
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/License_PT.rtf
- Size
  
  7KB
- MD5
  
  858d50016b5091a71bde743798e4fde9
- SHA1
  
  80fe9815569fab908af407db0b0c386ee5fb0499
- SHA256
  
  0d121347542face1889918432c70ce29e0fed3f53a837c9d03c9a73f49ccc834
- SHA512
  
  2fa1080a2d667629fe2862075855b6ae1c6b4e592fc2e119f2775fb1ede100cbe9efd5252241b6ee4eddf8925d99e1751f06c0c3f0ad2290f489e0caaac7fce2
- SSDEEP
  
  192:YfMZT9jNvNThXsR00Ao2dyTSWOrrgSRfM6+QxFHYidArvNK3pCnLPeWVRX2:X9jxBhXsR00odI1j6Hb8vg3pCLP1VRX2
Score

4^/10

discovery
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  14KB
- MD5
  
  a5f8399a743ab7f9c88c645c35b1ebb5
- SHA1
  
  168f3c158913b0367bf79fa413357fbe97018191
- SHA256
  
  dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
- SHA512
  
  824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
- SSDEEP
  
  192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  $PLUGINSDIR/Registry.dll
- Size
  
  24KB
- MD5
  
  2b7007ed0262ca02ef69d8990815cbeb
- SHA1
  
  2eabe4f755213666dbbbde024a5235ddde02b47f
- SHA256
  
  0b25b20f26de5d5bd795f934c70447112b4981343fcb2dfab3374a4018d28c2d
- SHA512
  
  aa75ee59ca0b8530eb7298b74e5f334ae9d14129f603b285a3170b82103cfdcc175af8185317e6207142517769e69a24b34fcdf0f58ed50a4960cbe8c22a0aca
- SSDEEP
  
  384:W2mvyNjH3rPnAZ4wu2QbnC7qB7PnrvScaeYA4CIDEge/QqL2AQ:/75w/OfrzB4CUxuQfA
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/ThreadTimer.dll
- Size
  
  3KB
- MD5
  
  c43953f463c22e048e45b402d190e77d
- SHA1
  
  b4a5e6567bed3c783af030df9418f91a7bac3040
- SHA256
  
  4e2a7c511e0f2ef46ac9002e0666f058ea5a4657371f086e2e4797393ee2fbf2
- SHA512
  
  18facd89f3dc55826b7aa0c02b8fdf3a1e6741850e4d9c264fb095e9da7956f6a4d331655ef00862948397d1a3f99d15243d03ef09c145a39c3b9a0c2ef4c974
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/TkInetc.dll
- Size
  
  172KB
- MD5
  
  8777f46e35ab035d4b526377d9a7097b
- SHA1
  
  9780ff9145be4aa7a912e6dbaaf7d781316b9adb
- SHA256
  
  d5bb2ebaac75a1588f00cea3d35faea0e5a3c7c319785406315cda2d4a52bb47
- SHA512
  
  131d6d9de492d55dc55df396a5153119bcb1c09c723abf009d8a7ef3cc71244b51f7ac1715bf7bc23c9b94ac661c255cd7a30e97267295ce060487705395128c
- SSDEEP
  
  3072:bhW2YXDpNYCy32SHyE1k7skVSiIJz6Kp+CYF:bhW2YTIJzk7skVXIg
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/TkNsweb.dll
- Size
  
  59KB
- MD5
  
  c6731fd774db4835a5763afd404a50eb
- SHA1
  
  c6b20b36631b513ca8647d952b95469b77d2ac24
- SHA256
  
  23861a8828cedc363baa54760766c01fdd9e1414073ca1148ff9a19ca818b13a
- SHA512
  
  c3eca3f693f4ff6b078e0708c70156f2184708f0e07d40f3cd54dd24556ae6e010a89b9bfb777f4131f0d0ee0f87d79015e7eb8f0b2606fa156d846dd581e197
- SSDEEP
  
  768:LGGFsrrp6e7co2DLJUcUw9nf/bsJVtCcdWANKDrYsWjcdvCQFEzLr+M4dk:LGdNRIrLJUBwZUvCcdgYsWjcdqQdvk
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  $PLUGINSDIR/inetc.dll
- Size
  
  76KB
- MD5
  
  ba2746d730da7f0fcac4866adfef6f51
- SHA1
  
  5a72a6a18514bed5fcae00f891f1c540bbd3341f
- SHA256
  
  6a5060a808d9944286d1b38758674b2e206e0ab6235933c029ea9cac833dadca
- SHA512
  
  bc518c1c280ab5101ebfd3f0ed5c18bdbedbb0d1840337cb13d2cca329f5e622d498868130187da997d21ce2ea8f664c12a34550788b6b55c1b8c54223c484bc
- SSDEEP
  
  768:4WZcbMjnQg12mHxBwmAHoGtGGCr+C3C5iAKonybl06rzJWNJbwpCfqDt4kJ:HZtQg1rHxymMtWJ3J9bK6rz0Nu5t
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32