d7099e78758ae427ecc245271a35fec06099f96a141dbe57ce3816eba37cdba7

Sharing

Copy URL Twitter E-mail

General

Target
8efc96f06de0f618b21af5132d5cab7c_JaffaCakes118
Size 2.4MB
Sample241104-ea62gatbrp
SHA256 d7099e78758ae427ecc245271a35fec06099f96a141dbe57ce3816eba37cdba7
MD5 8efc96f06de0f618b21af5132d5cab7c
SHA1 75147ea8c6ff4490494b3e576193acbf79d99098
SHA512 6840b5658644a88abe6d1ef00b669f4a961c331d8cb6e1be1a051c8f2042d4f35d975a7adbb457cdca67cf9d2bf5e309b9e0dea0f0fb475d01fd7e125a3e2907
SSDEEP 49152:MgHoUtZlRNpV97oUlw9F/MGtzGVGLyUJBe0ZJCA8Rzx6kA2ZWr:M8oaZh2KwjEGdGSymM0qzCh3r
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Targets

- Target
  8efc96f06de0f618b21af5132d5cab7c_JaffaCakes118
- Size 2.4MB
- SHA256 d7099e78758ae427ecc245271a35fec06099f96a141dbe57ce3816eba37cdba7
- MD5 8efc96f06de0f618b21af5132d5cab7c
- SHA1 75147ea8c6ff4490494b3e576193acbf79d99098
- SHA512 6840b5658644a88abe6d1ef00b669f4a961c331d8cb6e1be1a051c8f2042d4f35d975a7adbb457cdca67cf9d2bf5e309b9e0dea0f0fb475d01fd7e125a3e2907
- SSDEEP 49152:MgHoUtZlRNpV97oUlw9F/MGtzGVGLyUJBe0ZJCA8Rzx6kA2ZWr:M8oaZh2KwjEGdGSymM0qzCh3r
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InetC.dll
- Size 23KB
- SHA256 5233110ed8e95a4a1042f57d9b2dc72bc253e8cb5282437637a51e4e9fcb9079
- MD5 7760daf1b6a7f13f06b25b5a09137ca1
- SHA1 cc5a98ea3aa582de5428c819731e1faeccfcf33a
- SHA512 d038bea292ffa2f2f44c85305350645d504be5c45a9d1b30db6d9708bfac27e2ff1e41a76c844d9231d465f31d502a5313dfded6309326d6dfbe30e51a76fdb5
- SSDEEP 384:l4Z8sUAUNuGGsPVPEZ+OLkCnFJDhgvZwcRa9h9S4y4fO:lG8sUAUnt88CFJDhmajMA
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
- MD5 959ea64598b9a3e494c00e8fa793be7e
- SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
- SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64
- SSDEEP 192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsCRandom_1_0_1_1.dll
- Size 139KB
- SHA256 5efd476cb861695bfbd04ccdbb952655d40a393a30d8490e474a48c3937c62f4
- MD5 077a42a89875b2271731ce9afcfec5cd
- SHA1 65c034b85516a5e7d55a94ce283851aee1fc37fe
- SHA512 18849c08991376658ce0206bc33baf7fb9eb8cd4c37e3c0da96cf64c7352896f0796fab5bc9ca92aaa1c5e383b5e19f3518a644ad42e2304a8ea6b5758edbf18
- SSDEEP 3072:m0Up9QhEM7xUqjc/sQbltPXJ2ERFmahHOaH8AiHK6:m0UK7CqwDbnZBRFm6M
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 8165c7aef7de3d3e0549776535bedc380ad9be7bb85e60ad6436f71528d092af
- MD5 08e9796ca20c5fc5076e3ac05fb5709a
- SHA1 07971d52dcbaa1054060073571ced046347177f7
- SHA512 02618317d6ab0302324aae4d3c5fca56b21e68c899e211cfa9412cf73820a1f931e56753c904fd7e510c638b4463aedbfe9536790279e096ea0387b67013e0c4
- SSDEEP 96:/Uspq2y5jOEEQrhySvUgfj74/vvrTBzfYZA4YF3Telac1nIq/2:/erjOELhySv5f2vvBjiAflaB1nIq
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/nsJSON_2_0_1_0.dll
- Size 81KB
- SHA256 83c44cfcc5c0fe4987453e6306c55e2f2e62bb2be2297acae92f047ab8ad9e47
- MD5 51eff3c4a3bd1c2a5726c81d5d02c695
- SHA1 4ea472a3b3ffd2bd5288ac43747d0ffd6b6e5f68
- SHA512 83b929607d9aa70a5a52976ed961cc047f09505f733a50ebc04fe925911dc0495c0f4b89a6a1bdc01e274d45a444ea7413db57305a653cefeb0ce21712f00ba2
- SSDEEP 1536:H1PLM1XUtvU3asv4cbCM5gjz2rs/2hLkbZmJ3qE:HhHYas5gj4sehCmJ3q
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/nsJSON_2_0_1_1.dll
- Size 81KB
- SHA256 06bed90ca7b5378867fb3e75660e88783cf31cd3833de2fedf5f048dbe1031c0
- MD5 e07d77d9fbb7a0905f28592cccdc3a83
- SHA1 318cb13331ecf97ffb53ef6c9aaf7b681cf070c1
- SHA512 6505aca263f1d6c0a4233d01db7c7eb1a1b2a7d2b31d69b8134c0e684fd9bab306c0a8376915948e8cc5798137f58711f717bddabc962898fafb3641ea3aea14
- SSDEEP 1536:Hbxeuc++cpnIrlyAU8b44r19NKTAdkFKEtkBbtfNoz:Hbx7TIwW9NLdqKEsbtf
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/nsPrefsJs_1_0_0_4.dll
- Size 169KB
- SHA256 cad8134fff16bcc5d39037e63b5248c70ed56b057546ebd3d8c3730c4fd5a563
- MD5 0ec67d6067f0409a138d68b64f4dbab2
- SHA1 e4f4ff199fce15c07a303e8675d87ba95519c39a
- SHA512 73121a53819447bcea34edb759c665e5c4617f48b7f302c557c0b6249b8e2a62f295cf00beb7ede55fe28b0c07db8e04e2ea384e05ce4ef9f339a4c9dc25e4eb
- SSDEEP 3072:f9Qg/5eZY09hl7PtmqWy3FR+yPMN/vjn708+iNVcquqCQVxe:JeZY09DhtxFUy6Xjn708Rj5e
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsUtils_2_1_12_0.dll
- Size 301KB
- SHA256 7adb7478a489b7e864d31c0233c0d46ff289ab23b5ec9cee0f54c00e2abb6bba
- MD5 ba585948a2f2f9151cadc86474e1d870
- SHA1 45635aca9ffa7b4f59c6e90a965a7c4692d9113a
- SHA512 dce8b4bd727609ebce55471600804351fb9592a01113afbb91b38e40489d41e5c650c1d624c895c9bbe98918a3de2ffecb8487efe41717b9fd4245d08c2a5c8f
- SSDEEP 3072:f5I2C9gMshTKLOgQr0jITe/Xp72rIrfJ1+Z6WDsG/dv+8z5xZoc9/xnNd:f5I2ogflKyHiITeh728PfWhTZ1j
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsZip_1_0_3_0.dll
- Size 224KB
- SHA256 b40097ebc411f2c06fa9ca7d653c145a2831242584e0d47d9ee32a9e22e4518d
- MD5 172a5c79bfad53ea05fcdbbd1fa15347
- SHA1 af6159dcfcca402d05837094e9b2279014e2b052
- SHA512 374013dd19d85e45b4a405126b1dcc7ce0d27f59219d2db4882acc0bc3a555c56c5808ac70f9ac6cd7a81b9938d0db5a67f0e1345092ce703325e819c675149b
- SSDEEP 3072:9MNBaC8+tt7n7J5IY5uStf2Mum01YA6nb+NWdKDoJ8/5JSoAR:ON8l+ttJ+Af2601YvnbwWZCHA
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  Chrome/CT3298573/content/BrowserContextMenuManager.js
- Size 2KB
- SHA256 111f66d10af362ad135203c751c5851985722aa56f038143d5b159b06e120509
- MD5 be0054198409f0029d4472ee9e290972
- SHA1 c2b38ff88c2b30d0619e9fdf2f4bb33191e5ea8b
- SHA512 97ff4b1ae959c7266e31e09635d0c65a1b5d79eda93a08697fe9e94a95c1cb12831d2b1ddc251c2f012130914c575fb3c0a9d45af3bcb2bbf34e9509a90ad068
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral21 behavioral22
- Target
  Chrome/CT3298573/content/ConduitAbstractionLayer.js
- Size 35KB
- SHA256 68fd6a8178d7e7a588e7b7ce99a5cc112c910c912bc32b6a81467747737abaad
- MD5 115455e3b5034ea10177d137ee85afc7
- SHA1 f834132c23bf15be472135c3da3496f77d49ba71
- SHA512 11dfe94d9e8239cfd7c5819a4aa05f4eec843e2b203300cce11531c5b9ce4f6cf3152520909f3cc50088bed109548bf2968005ec024d8e117e327136bcd75753
- SSDEEP 768:diZAPc0R4YA3OtWEN+p93vVxB3LIsdfYSY8HjKysB5aa/Ml68RWYQkxYdTW32k8V:vp89Tlny
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral23 behavioral24
- Target
  Chrome/CT3298573/content/ConduitAbstractionLayerBack.js
- Size 35KB
- SHA256 68fd6a8178d7e7a588e7b7ce99a5cc112c910c912bc32b6a81467747737abaad
- MD5 115455e3b5034ea10177d137ee85afc7
- SHA1 f834132c23bf15be472135c3da3496f77d49ba71
- SHA512 11dfe94d9e8239cfd7c5819a4aa05f4eec843e2b203300cce11531c5b9ce4f6cf3152520909f3cc50088bed109548bf2968005ec024d8e117e327136bcd75753
- SSDEEP 768:diZAPc0R4YA3OtWEN+p93vVxB3LIsdfYSY8HjKysB5aa/Ml68RWYQkxYdTW32k8V:vp89Tlny
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral25 behavioral26
- Target
  Chrome/CT3298573/content/ConduitAbstractionLayerFront.js
- Size 35KB
- SHA256 68fd6a8178d7e7a588e7b7ce99a5cc112c910c912bc32b6a81467747737abaad
- MD5 115455e3b5034ea10177d137ee85afc7
- SHA1 f834132c23bf15be472135c3da3496f77d49ba71
- SHA512 11dfe94d9e8239cfd7c5819a4aa05f4eec843e2b203300cce11531c5b9ce4f6cf3152520909f3cc50088bed109548bf2968005ec024d8e117e327136bcd75753
- SSDEEP 768:diZAPc0R4YA3OtWEN+p93vVxB3LIsdfYSY8HjKysB5aa/Ml68RWYQkxYdTW32k8V:vp89Tlny
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral27 behavioral28
- Target
  Chrome/CT3298573/content/logic/autoComplete.js
- Size 7KB
- SHA256 b98c90ece08031ec6acef6335cea1c04d5dab883daf03894e2c2e3c91186af27
- MD5 22c0821ee558ad9691b2ebb128a32cc9
- SHA1 75283ad8cce055f23e31576c78a5650a4dd957ec
- SHA512 e2fe6cb431d7d3c69168ad35890517dc838a45bc70856591b0ec7bfe050cf9eed55e2efc16cf32d8d3fbd19087ff40c77e914bc8f19cb4ad0b594ceeb6ed9025
- SSDEEP 96:8E6gCHRihEDvWexO3Ci4Pk1Rz6SKGiHYoAWQC/Zt/XLK7AYpL2+U++pskyiTu6Fz:8pg0YED+exPpP0kEoNV7/oAI22+psxYJ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral29 behavioral30
- Target
  Chrome/CT3298573/content/logic/priceGongMigration.js
- Size 22KB
- SHA256 df5f94c20ce87180376620d75af72e09f523386fd81f99eff92aa2ed66e20899
- MD5 25e3686e1228d27ed245f7dc0b524d40
- SHA1 b553539d2854c296e121a41cafc1e8dac733d716
- SHA512 12ebde9dc11bfd9b6ec19a46030d2bf51dd7cd139ff0ccf38869527488c536ee1b8bfb29ed24ef4eb17ccc07394b82d92697a04a406eb3dbdeeffd688d68f19c
- SSDEEP 384:5PX+F0P6HxDIHY9rMyMASynkbAF0H38QnaSXLUwKu07iJl8MsNFvq3TD8yW510eU:VX+FUEIHY9rMyMASynkbAF0H38QnaSXt
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Reads user/profile data of web browsers

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32