Overview

overview

7

Static

static

3

c439cc4195...18.exe

windows7-x64

7

c439cc4195...18.exe

windows10-2004-x64

7

$APPDATA/s...k.html

windows7-x64

3

$APPDATA/s...k.html

windows10-2004-x64

3

$APPDATA/s...k.html

windows7-x64

3

$APPDATA/s...k.html

windows10-2004-x64

3

$APPDATA/s...x.html

windows7-x64

3

$APPDATA/s...x.html

windows10-2004-x64

3

$APPDATA/s...m.html

windows7-x64

3

$APPDATA/s...m.html

windows10-2004-x64

3

$APPDATA/s...n.html

windows7-x64

3

$APPDATA/s...n.html

windows10-2004-x64

3

$APPDATA/s...m.html

windows7-x64

3

$APPDATA/s...m.html

windows10-2004-x64

3

$APPDATA/s...m.html

windows7-x64

3

$APPDATA/s...m.html

windows10-2004-x64

3

$APPDATA/s...m.html

windows7-x64

3

$APPDATA/s...m.html

windows10-2004-x64

3

$APPDATA/s...n.html

windows7-x64

3

$APPDATA/s...n.html

windows10-2004-x64

3

$APPDATA/s...m.html

windows7-x64

3

$APPDATA/s...m.html

windows10-2004-x64

3

$APPDATA/s...m.html

windows7-x64

3

$APPDATA/s...m.html

windows10-2004-x64

3

$APPDATA/s...m.html

windows7-x64

3

$APPDATA/s...m.html

windows10-2004-x64

3

$APPDATA/s...n.html

windows7-x64

3

$APPDATA/s...n.html

windows10-2004-x64

3

$APPDATA/s...n.html

windows7-x64

3

$APPDATA/s...n.html

windows10-2004-x64

3

$APPDATA/s...m.html

windows7-x64

3

$APPDATA/s...m.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c439cc419562f1d2552a91e62b33be31_JaffaCakes118

  • Size

    2.5MB

  • Sample

    241204-y4w8xazjaz

  • MD5

    c439cc419562f1d2552a91e62b33be31

  • SHA1

    26210975dbd42dd02290794a9400c44a64b9bd74

  • SHA256

    be6424c75717ea73b6233777c2f8c4c3c98e48e13607f5ab049c1d8426bf1833

  • SHA512

    26b9e33db41e7d821a3470e9166aeae6ae37485bbf9f16d682408f83bc15a47bff4845c6214f8fd6654f1b7fd25d34a8c617a37f6cfbf1c7cc81e1c189d476cd

  • SSDEEP

    49152:yw1P8clUXcQPKkUwBFA2XhB2/Dy9BoR+Jmq1Wayp4awkhPJWb:FEclYcQPKk46o/u+ibysc4b

Score
7/10
discovery

Malware Config

Targets

    • Target

      c439cc419562f1d2552a91e62b33be31_JaffaCakes118

    • Size

      2.5MB

    • MD5

      c439cc419562f1d2552a91e62b33be31

    • SHA1

      26210975dbd42dd02290794a9400c44a64b9bd74

    • SHA256

      be6424c75717ea73b6233777c2f8c4c3c98e48e13607f5ab049c1d8426bf1833

    • SHA512

      26b9e33db41e7d821a3470e9166aeae6ae37485bbf9f16d682408f83bc15a47bff4845c6214f8fd6654f1b7fd25d34a8c617a37f6cfbf1c7cc81e1c189d476cd

    • SSDEEP

      49152:yw1P8clUXcQPKkUwBFA2XhB2/Dy9BoR+Jmq1Wayp4awkhPJWb:FEclYcQPKk46o/u+ibysc4b

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

    • Target

      $APPDATA/seemao/config/Seemao_blank.html

    • Size

      6KB

    • MD5

      d126c27cffde05d823e125fc5dfdfc2f

    • SHA1

      cb629ad85290319f7fa65640177973fb4e744dc6

    • SHA256

      1d0069849395e9a367923f38f2c26e12853b28544a185680992b806dffb8a7f7

    • SHA512

      f90b6976ce447e6eb5e91adaf5dd27dccbd2af91c3a0627956c3c94824980a4a389382f5e07f7254c5f11db8356cf0fca0e062e43c032db0d58501ea4bb14be9

    • SSDEEP

      96:pI2Okve20XGknAQIRI9TM34FUzJuvEw9Vzw5Q7F/b9:pI25V0X3AQIRI9T84fEwPw5Q7F/b9

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $APPDATA/seemao/config/blank.html

    • Size

      8KB

    • MD5

      513ebdf12e2177e6542217ab03525223

    • SHA1

      1d104c7be69390da9cf2080dbcc04ba1e6992b8c

    • SHA256

      558d6027fb5afd5dfd4188b7cf74499f980331ae888a73b39d6790f83115619d

    • SHA512

      b37f9f598f12699dd19abadf6ebffa53f9561cee358fe6e77bcb797cbed60609064231627384646025b87a946456a1024feaf153a111b07d4fdbe54f281e5219

    • SSDEEP

      192:pI22Qq8LneLC4c/f6234LiBPdlduM6m+qHVRWLbgbaEKwwI8o:pIC34LiBFjJ6eHVRWLbgbafwh8o

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $APPDATA/seemao/config/map/index.html.html

    • Size

      1B

    • MD5

      c4ca4238a0b923820dcc509a6f75849b

    • SHA1

      356a192b7913b04c54574d18c28d46e6395428ab

    • SHA256

      6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    • SHA512

      4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $APPDATA/seemao/config/map/www.360buy.com.html

    • Size

      2B

    • MD5

      9b35dd1fd8fb2e8ba4a972122aca50b4

    • SHA1

      3e7f8dfde6fdfbe8ac9722e701cef405a9236330

    • SHA256

      eef2eae2699d81c58d176a9a58d4bf183df2acb6844b9eebf1cc60ae460ec50d

    • SHA512

      dc7fb0400a439e7de8f851e28c48951459483089398ce3be6596f0abb8545f27b0b35eb901e9a3ccb7177e70fbb19276d4f885258089e8b4ddfa2e10facc3c1d

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $APPDATA/seemao/config/map/www.3dbuy.com.cn.html

    • Size

      1B

    • MD5

      c9f0f895fb98ab9159f51fd0297e236d

    • SHA1

      fe5dbbcea5ce7e2988b8c69bcfdfde8904aabc1f

    • SHA256

      2c624232cdd221771294dfbb310aca000a0df6ac8b66b696d90ef06fdefb64a3

    • SHA512

      bc23b8b01772d2dd67efb8fe1a5e6bd0f44b97c36101be6cc09f253b53e68d67a22e4643068dfd1341980134ea57570acf65e306e4d96cef4d560384894c88a4

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      $APPDATA/seemao/config/map/www.7cv.com.html

    • Size

      2B

    • MD5

      54cafa3a6d69c189cf2df3978fbdd435

    • SHA1

      ab34955f0a30619fc4faa49013902031d85ddc46

    • SHA256

      e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7

    • SHA512

      43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      $APPDATA/seemao/config/map/www.99kaoshi.com.html

    • Size

      1B

    • MD5

      c81e728d9d4c2f636f067f89cc14862c

    • SHA1

      da4b9237bacccdf19c0760cab7aec4a8359010b0

    • SHA256

      d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

    • SHA512

      40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      $APPDATA/seemao/config/map/www.99read.com.html

    • Size

      2B

    • MD5

      54cafa3a6d69c189cf2df3978fbdd435

    • SHA1

      ab34955f0a30619fc4faa49013902031d85ddc46

    • SHA256

      e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7

    • SHA512

      43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410

    Score
    3/10
    discovery
    behavioral17behavioral18

    • Target

      $APPDATA/seemao/config/map/www.amazon.cn.html

    • Size

      3B

    • MD5

      9e73f8411a70e1bceefc15ac312a362b

    • SHA1

      21c4340e3a66a7bc00e5805bc1ebe30d3f2e218e

    • SHA256

      c69684c471706da34b39b2994be39294926dc543e51aea5f4ce0f06091a00ebd

    • SHA512

      59bb8b649fad3c2c990881eeb177ca0a751eb64b57b111da5300e5025753c9f642297d8c71b0b9ac0712f33af31a853d6174c1648f56ccadc66cf23e4130f538

    Score
    3/10
    discovery
    behavioral19behavioral20

    • Target

      $APPDATA/seemao/config/map/www.bgccbook.com.html

    • Size

      1B

    • MD5

      c4ca4238a0b923820dcc509a6f75849b

    • SHA1

      356a192b7913b04c54574d18c28d46e6395428ab

    • SHA256

      6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    • SHA512

      4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

    Score
    3/10
    discovery
    behavioral21behavioral22

    • Target

      $APPDATA/seemao/config/map/www.china-pub.com.html

    • Size

      3B

    • MD5

      37705de0752d1027f8fc3b3f390c448d

    • SHA1

      b9a36fe59d4092c1e8363b6dbb80c4325170ebb9

    • SHA256

      b8d52dc3f650996a66e32d4fd4f40129f6d5f742a20893615fe1b8dbedac6039

    • SHA512

      affe90e227dd7fed7ac0d9dfcd7a01dda8d7abb454e23a4d98fd7c1c4f8f38bcc7f6062cb52cbca3ac7088ee55900a5b85810e2d258b6896528d8cac87dd4709

    Score
    3/10
    discovery
    behavioral23behavioral24

    • Target

      $APPDATA/seemao/config/map/www.dangdang.com.html

    • Size

      1B

    • MD5

      c4ca4238a0b923820dcc509a6f75849b

    • SHA1

      356a192b7913b04c54574d18c28d46e6395428ab

    • SHA256

      6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    • SHA512

      4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

    Score
    3/10
    discovery
    behavioral25behavioral26

    • Target

      $APPDATA/seemao/config/map/www.dazhe.cn.html

    • Size

      1B

    • MD5

      c4ca4238a0b923820dcc509a6f75849b

    • SHA1

      356a192b7913b04c54574d18c28d46e6395428ab

    • SHA256

      6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    • SHA512

      4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

    Score
    3/10
    discovery
    behavioral27behavioral28

    • Target

      $APPDATA/seemao/config/map/www.huachu.com.cn.html

    • Size

      2B

    • MD5

      54cafa3a6d69c189cf2df3978fbdd435

    • SHA1

      ab34955f0a30619fc4faa49013902031d85ddc46

    • SHA256

      e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7

    • SHA512

      43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410

    Score
    3/10
    discovery
    behavioral29behavioral30

    • Target

      $APPDATA/seemao/config/map/www.m18.com.html

    • Size

      2B

    • MD5

      54cafa3a6d69c189cf2df3978fbdd435

    • SHA1

      ab34955f0a30619fc4faa49013902031d85ddc46

    • SHA256

      e12a7e051731cf1dbeefa2142a8e1abb1eb5898e2cbe4aa522120829a5588dc7

    • SHA512

      43e539801d00eb39811341d67327e0e8b7d97677e08c8cd14d501c1276592a80dcc0983306f292c702a7553d34bad9fa768cf9d046059c3a4b2a1a0a892f9410

    Score
    3/10
    discovery
    behavioral31behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

Score
3/10

behavioral1

discovery
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10