72099e272dfcf2052747b328f73624adb9dbb108df44e44d906d75d2d0ebfbcf | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
56d65e0bb8b89e73cddb9219f375f70f_JaffaCakes118
Size 1.1MB
Sample241018-l4vnvstdml
SHA256 72099e272dfcf2052747b328f73624adb9dbb108df44e44d906d75d2d0ebfbcf
MD5 56d65e0bb8b89e73cddb9219f375f70f
SHA1 020a964491608b673d8dc31fe16231f25aa8568b
SHA512 70e84d83f33cdd853f071849f60686aaf3cca39e98de7465e40319dbbf0b7d70b4c6da395e42b9ae4a37f83931aa5e8bb537c9810b9ed3dc56ccb5edade16c01
SSDEEP 24576:x890qAplMw3u1QOAc0cHdCBOD8iWjwIYFWAx10wcbbX0QoKXWvj1LL2/ZvL:x8kpVeaOAcSovWF69xujbbkQ21GR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Targets

- Target
  56d65e0bb8b89e73cddb9219f375f70f_JaffaCakes118
- Size 1.1MB
- SHA256 72099e272dfcf2052747b328f73624adb9dbb108df44e44d906d75d2d0ebfbcf
- MD5 56d65e0bb8b89e73cddb9219f375f70f
- SHA1 020a964491608b673d8dc31fe16231f25aa8568b
- SHA512 70e84d83f33cdd853f071849f60686aaf3cca39e98de7465e40319dbbf0b7d70b4c6da395e42b9ae4a37f83931aa5e8bb537c9810b9ed3dc56ccb5edade16c01
- SSDEEP 24576:x890qAplMw3u1QOAc0cHdCBOD8iWjwIYFWAx10wcbbX0QoKXWvj1LL2/ZvL:x8kpVeaOAcSovWF69xujbbkQ21GR
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/Base64.dll
- Size 4KB
- SHA256 7c688940e73022bf526f07cc922a631a1b1db78a19439af6bafbff2a3b46d554
- MD5 f0e3845fefd227d7f1101850410ec849
- SHA1 3067203fafd4237be0c186ddab7029dfcbdfb53e
- SHA512 584ae5a0d1c1639ba4e2187d0c8a0ac7e54c0be0a266029c4689d81c0c64a7f80e7d918da0df5c6344f9f7a114f30d8f2feda253b29e813bae086604731a3d8a
- SSDEEP 48:SxSrr7xd14m4bLKwvnvcfDw1hEiauGkDVK+hIg4qT9/3lt:zr7xd14m4qw/vGwrEickDVthcE/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/BrandingURL.dll
- Size 4KB
- SHA256 bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
- MD5 71c46b663baa92ad941388d082af97e7
- SHA1 5a9fcce065366a526d75cc5ded9aade7cadd6421
- SHA512 5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
- MD5 SHA1 SHA512
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
- MD5 0dc0cc7a6d9db685bf05a7e5f3ea4781
- SHA1 5d8b6268eeec9d8d904bc9d988a4b588b392213f
- SHA512 814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
- SSDEEP 192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- MD5 00a0194c20ee912257df53bfe258ee4a
- SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/blowfish.dll
- Size 22KB
- SHA256 053b4487d22aacf8274bab448ae1d665fe7926102197b47bfba6c7ed5493b3ae
- MD5 5afd4a9b7e69e7c6e312b2ce4040394a
- SHA1 fbd07adb3f02f866dc3a327a86b0f319d4a94502
- SHA512 f78efe9d1fa7d2ffc731d5f878f81e4dcbfaf0c561fdfbf4c133ba2ce1366c95c4672d67cae6a8bd8fcc7d04861a9da389d98361055ac46fc9793828d9776511
- SSDEEP 384:yTxz0Cv0hqd+1TjQmd9YWrSUEc//////OD5hF92IJpJgLa0MpoYfAz6S:jCvsqdS3QGBREc//////Q53NgLa1ub
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/inetc.dll
- Size 20KB
- SHA256 6d6ddc0d2b7d59eb91be44939457858ced5eb23cf4aa93ef33bb600eb28de6f6
- MD5 50fdadda3e993688401f6f1108fabdb4
- SHA1 04a9ae55d0fb726be49809582cea41d75bf22a9a
- SHA512 e9628870feea8c3aaefe22a2af41cf34b1c1778c4a0e81d069f50553ce1a23f68a0ba74b296420b2be92425d4995a43e51c018c2e8197ec2ec39305e87c56be8
- SSDEEP 384:jQB2ZUVHUxgoJX0eBA6PcH85db+ya9cC0Ac9khYLMkIX0+G5xgZmT+m//a:j/UFeJ5S6PHLNa9cFam/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  ExtMenu.fnr
- Size 188KB
- SHA256 d9adbf90d193cd79cbad1ded212c7735fcc2c32d891fbe7150794f5369244148
- MD5 577f423d02d07989ad3cdf27a2032181
- SHA1 40fce5f17a93e5710a0968d74c81e32261002d6e
- SHA512 ca1fe211bbc93534071db278a474daab2b9b28dc8f5be25ab823de508503d13dc38bf92ce93faa9a545f663e317356d824c2c55726bf96ccd06e73b0bbdb114c
- SSDEEP 3072:Rp5dvKS5bulYocgdy3el3comKi89FNozPmdyjxN:LDKhcgNpj1pdQX
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  HtmlView.fne
- Size 224KB
- SHA256 5aa45b6024eae73a509041d0e532afef7a4a7fb5fb7e5efce29ff04313a6977e
- MD5 5de3e6de5001ba45853c1824babe0774
- SHA1 ce238d98ad066e53810e5872168bc84fc4f325cf
- SHA512 3b9945f6671c47cad49ab7e43ee24e430e3ce1b4d761604246c69aea9f4b8449a3133e8a7c8cf9f851e99525e7deedac414381a86f4d95faa80a471b7cb209db
- SSDEEP 3072:hlxzJamYkzqUcF3Qg2gEVkzNJNg9IN1EkrL7cDJkwrctohVoPNr35OA+9u+X:dYicF3QuEVkX1pCsgFX
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  dp1.fne
- Size 128KB
- SHA256 cf002b87a2bc481465cc977630eb7bffd8c65aaaf7a6f7d5b9ff880dc8b8e207
- MD5 a29510e1f407b73f6e649a3139dd86e7
- SHA1 e53c5ad5205e8639f98d28d8aa407573fbd5d9ce
- SHA512 b03b30923ef3073bacdece0301bafd31fc2481a0a122d480500d4282c5d068d9c55355820b1ffddca12aad33e7ace00dd7468f80870d4a781baa7c4ecba4c9d7
- SSDEEP 1536:u8ZshM+fWvw1CEb18fNf6T/PLr+UTMoV51oF92w:3Zsu4WvjEbSmrlV51o1
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  eAPI.fne
- Size 332KB
- SHA256 039670ca85824d4850e737a308aa8e628c83551a21711d549b17068fbdb2d9d9
- MD5 3102c454a9543e58fe3ad5f783f5a690
- SHA1 dc98fe9c47b1b4123ebe5e0132c0ba2d391570e9
- SHA512 5b3218804054f0a3c24f3705c4902f333db0fc7b39aa81c2b71fefa0bc7d2a2ded14a13ab01ef3627889ff167ee7f565401ad0e5b5c9697d40f14f67228b9807
- SSDEEP 6144:eeEzIRqmxNHrx9ojoKEgk1HDaVKnWwQ+X:eeEMYmDoc3FDaAWwQ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  iconv.fne
- Size 916KB
- SHA256 c6c3d6e75a9326647df42b3774c89ebe37a2451227267a8160e46ee3fe14ddf2
- MD5 529d8638819d16de6634c7441c952507
- SHA1 baeb093b41c06be5b1d9837738b035ec18486000
- SHA512 c8ddfe69d8bd0f3b0f2ae57578a21484b79e202bcb897dc8e8feb63cffedd13aaa2fa4da90d88b4974130c776adacc86e608825427e7a32f77a23004eeea2b67
- SSDEEP 24576:oDBf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLY:oB+s8KuqGaX0ToIBAUZLY
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  iext.fnr
- Size 216KB
- SHA256 7169863abd2e9a59ae706235224222754c44eea12a4304f6ac426ac4a89688a9
- MD5 f91cfe6df71fbbbe56ddf70247ab9b49
- SHA1 6d6e25569bca49c19f2a4b07675194a1bf055eb4
- SHA512 841a0632b0bca43d590f72602a0161e04c77e1e881d5bd6d294edab4f9c5577bb8e46f15dd6a0c831e5774fa53e449397146d57b8575ea04506a64f3842490aa
- SSDEEP 3072:edh+tmslaQRiAvBvXo8M360VVQrtPdDMDyowHhcA6anR:9iGK8M36zVdcb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  iext2.fne
- Size 480KB
- SHA256 6cf3add9e8297e2c6e0dd3ecdf7f8500c123c7779e5807a3c58de62aeb19156f
- MD5 338c9901d7a5cfeafd5b5a0c502fe96a
- SHA1 0caf8271b2ebe5d3bd6fd66223e3a7a1e7d3dbd4
- SHA512 45feb22b3fb505cb37ea0eff3494604f04a874ac6e8e2e9b2f2bf4d801f8d79a613967d23a4d69ffe0609d1cdba2c1292e5c8a3ec98df779db51b9be77a02a96
- SSDEEP 6144:G8VEQ9ESlMXVKy9RuNRtt1IsHM2UNtQjdurSiyhkre1OjCrZ43KL4Suofl:HTlIUtt7HM2qejdmSHkrmOWrm3Quo
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  iext3.fne
- Size 129KB
- SHA256 d7ca833f03bc6a6926165a587849930ad73194950e6235af536c311dd0074a13
- MD5 564e1af5a893cb9454c3bb6ae22fdadd
- SHA1 c1d22a4ad5f1303ea2e4675ae86cd10748689052
- SHA512 d025304fe0a2da8679864b6c4eb67d753a6048d31e36c303fe6bfc143ce263385a7a4ade99fbe20c4de3c8cadbbacc3c6176b5d1a4c9389944c73e80db1fed3c
- SSDEEP 3072:encP0G1qTbQsnrzF54dimCBuZBEXLoeD0oBE:enc7cTbQet54dimjEd0oE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30