74ae6f1ee17959064c9ceed0af1bbdf49d787860943967f9e936b9da2282f465 | Triage

Sharing

General

Target

57646658823c49a26a517e360746f2a7_JaffaCakes118
Size

4.0MB
Sample

241018-pgn5cawepf
MD5

57646658823c49a26a517e360746f2a7
SHA1

9f72601fb664358bc666a2754d41d81fd362b736
SHA256

74ae6f1ee17959064c9ceed0af1bbdf49d787860943967f9e936b9da2282f465
SHA512

a17d83671731422523e68e68e8d19e27d89a4fdb9810cc9e55d6484d92f090187344e4dbb5a0c1a1df6fa914962159252bd6e6d65d1450f80404ed5969f442c4
SSDEEP

98304:DrNGe8jAPHaYyP8IlpR5y8ORVbcZsXjsjCjaHuZW8i7:DrwjAfaTTzKbnXHri7

Score

3^/10

discovery

Malware Config

Targets

- Target
  
  57646658823c49a26a517e360746f2a7_JaffaCakes118
- Size
  
  4.0MB
- MD5
  
  57646658823c49a26a517e360746f2a7
- SHA1
  
  9f72601fb664358bc666a2754d41d81fd362b736
- SHA256
  
  74ae6f1ee17959064c9ceed0af1bbdf49d787860943967f9e936b9da2282f465
- SHA512
  
  a17d83671731422523e68e68e8d19e27d89a4fdb9810cc9e55d6484d92f090187344e4dbb5a0c1a1df6fa914962159252bd6e6d65d1450f80404ed5969f442c4
- SSDEEP
  
  98304:DrNGe8jAPHaYyP8IlpR5y8ORVbcZsXjsjCjaHuZW8i7:DrwjAfaTTzKbnXHri7
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/AnimGif.dll
- Size
  
  9KB
- MD5
  
  11e94fedb34f46458f9dc773a91f2770
- SHA1
  
  791cf30880c74df9d6f7c1e637e4fdf5fa88b38a
- SHA256
  
  54ccdcb42fb3e63b7a55e8c0e7d12182a0338ea38b106b793ca048000a189ab5
- SHA512
  
  57dd38bebdd7d8fbc4b3daeecabc5c2617d4f5b2f6ad2396a702f1da362bc72deacfea2dd1550b0e00269188676324e1b7dd6ed372211c8bf664af824ac8d950
- SSDEEP
  
  96:kVh/i//UrWWXMAb+6aNqRjTwUWo5zFyRH0aTyZekTIVCAEHZNKNy0p:uh/Bl8AIQR/bWSMRH00yQBEH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  12KB
- MD5
  
  1d5c649dde35003a618b9679d5d71b92
- SHA1
  
  0409bbab3ab34f8c01289cdd847b4d1a32d05b18
- SHA256
  
  0f4d3cee24e3f310fa804983c931d3628613988a24f0be7854f63a9309b8e45f
- SHA512
  
  b432ebcc52905662d61a3f17e08e209a3f9d836a9071b3b5e80070af7ebcf34cf66c44426dda041c2a258fda4787e5692e2b35acbcd73288fb84fe3c977bbfd9
- SSDEEP
  
  384:pKlm7i+c3QW6ckPhyDEaLnA2bbBBIXwZ:8qi8BcyhEhLBbbTI
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/KillProcDLL.dll
- Size
  
  32KB
- MD5
  
  83142eac84475f4ca889c73f10d9c179
- SHA1
  
  dbe43c0de8ef881466bd74861b2e5b17598b5ce8
- SHA256
  
  ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
- SHA512
  
  1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
- SSDEEP
  
  384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/KuWoNsis.dll
- Size
  
  48KB
- MD5
  
  b3e7956209bd65b8d91bb7a7682ad49d
- SHA1
  
  be0823d6b65e8a269639b994598d2459388112d0
- SHA256
  
  1dcd885560725fdc5ae985b0aa6abddff340247075815c059ef0665d2c4b5faf
- SHA512
  
  c22320f84afa0c7a19cb5baa35693dcc5dee0eb743444a028a58fb64082e1a7c5e7ca48d658cb1cfe08a709db425d36fdc4c7bb07c3bbcbbbd2215adf54a253c
- SSDEEP
  
  768:Bd03YSWRSKt6ieqFIamCgXMaFwAUjrb/J83vZepab3Djd:jyYfUKt3eqSpXMaFw1j/yvZepgDjd
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  10KB
- MD5
  
  4eff5fafd746f5decb93a44e3a3d570c
- SHA1
  
  a11aa7681b7e2df1c7f7492a127d332d1495ea8a
- SHA256
  
  cf61ddd15d63c25a12caee70f51ea736cfc02195c42e56ee01b33f689d3754c5
- SHA512
  
  cde82d2a1f28506e4c2264f6b82017a00af32f138ebcdbaf4cc58463870fa626f708aa57465294c5a6f096c886841e7b9112b85bf3ea2f1d8f2da816b51b2d72
- SSDEEP
  
  192:0OycJo/rJVCmIDNLU0dq5RD00lspbub76yL:6/QQ0d0RD0USq/6y
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  $SMSTARTUP/ֺ.exe
- Size
  
  81KB
- MD5
  
  d5ed691487498f857dfc1c1cfde068e2
- SHA1
  
  eb782b7a07fbbaf2bee36a7425b7be946f358c82
- SHA256
  
  01229e192a57af9cbd4f9b7d514ed70eb3ec0531ad873c80ddb60df6e72fde9e
- SHA512
  
  63fa61b69e630e5c1d384f888fdd0e7a45f17fee551223eb5bf980716da9a339a1133e8cb0790b62ae402fcac956545bab85eb77675a79691a72bfff8a943309
- SSDEEP
  
  1536:rskEJurs2elYMmXmlsFOH8wixbZeC0HP+naafClj:rsR2slsFE0xbZeCK+njIj
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  $TEMP/PluginNotifier.exe
- Size
  
  145KB
- MD5
  
  f913a6d4055319b5dcf62eb3c57e3e86
- SHA1
  
  8ec3f17967258caea10ea09dc8332603982a5e32
- SHA256
  
  3fe7fbb025c92db37610087407394730931761dd4bb872f23a70fb7f7edf8bf6
- SHA512
  
  c0da6077d2755cbf4a08c6df40d71a02a716dbfe574cf88435183684c35e6d4fcc82c7d03395c1ecf006e7b9566d93350ecfd39309224d0b37247b3e521fd0c4
- SSDEEP
  
  3072:r3mUqjK+EovoSCq+cPzaAXj0JRyXGceqKld3FM1:rWSRaoSX+cPv6qGcY3e1
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  Encode.exe
- Size
  
  85KB
- MD5
  
  f64bc71f44a66eda450b0331749000ee
- SHA1
  
  32beafbf282bbf8579585a01cf77311f0f637ca4
- SHA256
  
  798b61bd8fcba0a3d811b355f070b6e3dcbb27b9c7de430f9c7cb0a94c8dcf07
- SHA512
  
  d8cecbdd5842b5fd7a8f56d01eaea02a2ad1700ead7a521b92ed22937074f50c277ecfee3ad776079cebd4dddd04111ab142af4c164695b8a994c7b7d9be1aa8
- SSDEEP
  
  1536:FR65bk6w2KP0kVNO9eM1fnaenDshRX0QDwhaKcNl51afCK:FR6m6woN8eAs1pMl5gF
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  EncodeBnd.exe
- Size
  
  77KB
- MD5
  
  5648a95211379eb97c350caf23a4d8c8
- SHA1
  
  19cceb41b15f0f4a2d62d096efd76c968acee862
- SHA256
  
  d16aebfd3de281f37f2cad8a134eb692d8b84024658c8f6299db39a1d4095173
- SHA512
  
  13f0a7068737d166fb296eaf573d5d97251c145761b355353c38b0bdebad0a23c282d2a62f1a48891ec5135a3638c9ce3e9ce6841b22cb2e24c852971edd4512
- SSDEEP
  
  1536:SDpQn6sDNFZmIgdQ66/cExOv7IXSUppdnVjaZFlWrl2x6afCg:SDpQ6uPmXYcExCIbViel2db
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  KwFlashHolder.exe
- Size
  
  93KB
- MD5
  
  f0edda0c0ffa6e185e1ffb854d8dfdff
- SHA1
  
  0c05ee2c456c0901e4b810771652ed9576677b2b
- SHA256
  
  5ea3d26dd67f214935b5af342bdce89d308be21d5420b9fc04da9c50c7a67d94
- SHA512
  
  2c165c1637e40c6dc5912ce1304c17e7c0efd617e2b0ab60a2330b8314a9ed687fed0461712175eb38834bc760e1a57800bb36f9359344c61d823ad838d501fa
- SSDEEP
  
  768:I6HyUyR1Ace8yaIYuWttWSCFpA0B0yClh4FZU9QZU9wLWjbC3:I6SlGce84rWPWjFDelyz3afC3
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  KwInfos.exe
- Size
  
  197KB
- MD5
  
  075d54ed0210663d0798f25945a47ebf
- SHA1
  
  ed50db2ea696459ca71337e4b5114fa8a40f2c3d
- SHA256
  
  223c515fee5f83d8d4cd3369af8461ccb52420945fcc2e5670407dafaa6de3b7
- SHA512
  
  06d218fe6fbf5b7224875f0549577840fff93732c7a3fe2e2fb7f8008b20ecd804eaea11876539f4fba1ed5147b7e2d38e386f5e24af2fce0c5af6754301c16c
- SSDEEP
  
  3072:gckczBGXLUMSQt0mo/qh58m39rhX6wMlEtXcHLecHLe48:+cNXMSQtlo/q0mhhX6wZtsHLlHLep
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  KwLogSvr.dll
- Size
  
  89KB
- MD5
  
  89e1ef7c38feca2a54f095011a4d33d0
- SHA1
  
  f275ccee9caf2c54760e7c6aff2f036eb9d6a4d3
- SHA256
  
  dfee05e4a7cd59b4763d463a0f438b19bca123d37eceb2cb108750395ca12130
- SHA512
  
  78be51999a127a287c3d614da9a9b0982879c1bbc86166a4d806868aa08904d0196602a4a9985906c82b9c76b6476872067a76c5c71db926036d230d060dacb5
- SSDEEP
  
  1536:JbllOS4Oh1pm8uwfjfHm7UziybnnnJSP0IX5BJ6jJaAnafCGD:J+CuYj7ziybnnnJSP0S5b6laphD
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  KwMV.exe
- Size
  
  329KB
- MD5
  
  8283750591fc2ae6a7cb15d8d13f0301
- SHA1
  
  2d2743481cd4670e61d7e044694c5036be7e3481
- SHA256
  
  46041c33bc2ccb2583ccd6dd7ef303bd74d1d66305f921f51909632a6986532a
- SHA512
  
  772fe4b5ea436a4ad4a38801730f11b1755cff3d6e0bf122207f3c58b9acf4803e246af582d9f3ca2b38dadf43d6849f9a6ef540e8d148af58b11aedd810ac1a
- SSDEEP
  
  6144:JmsOdG0x+Jqbv7IVUw9/Z4MjNeBe8d7iRMZjsKTBJRyUOfvhd2/9:JKdG0Rbv72Uw9/Z46Me8d7MMXT7RyBf8
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  KwMusic.exe
- Size
  
  4.0MB
- MD5
  
  4dc56a99e2452eaf1340ca7101962afd
- SHA1
  
  c944ebd5f56647f412e3f33752d8cc256ff033a3
- SHA256
  
  1ccf8f947ad8a79dc2b92f12211264ec44dcef68afeecbea96e307764f9d1bbe
- SHA512
  
  eeb770cbe039ee3a8fe3fe9c71396567c8948cc883226a9bac263fe02d2bc546aa752e572f54bab71afcad15f408d59e5adbd20735d21ec275014025e7611d0c
- SSDEEP
  
  98304:CZq/xmOuzgUzCJAF0WplcMZ5YOKFY2DOmFX5yx6/rZ2WEa1jA9g:0qJWzCJXrZ2WT
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  KwUpdate.dll
- Size
  
  145KB
- MD5
  
  0037f8fa478e4b2af85cd3175a117d9b
- SHA1
  
  1f544ee28601fefcc1bde6e9b5bcab3073812535
- SHA256
  
  6ab064636bb60802f19f0317bb65060e7fa1025b335d33718062b44f4f786257
- SHA512
  
  3e5f5dcb18446b7617b7fe3b61e2368a278e7a1fc594e101724c5998cd11826cb3f6ff0f36cb9ce7af4ede5fa959b4aba3c333eb49594d1de3cb0117a4228c70
- SSDEEP
  
  3072:taNFwoWxpcWYn6WAmtnj/C9k6hazNxsih3TTBfF+S/Fm0+JD2Wn:tEAk7jscTTBd+EFm0y2Wn
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32