b4d38ca8d15ea651ac5e1a5de5d81c4e2edc54845d6ae7a7beb03a243c3965f6 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
JaffaCakes118_40b8e98df567505d12e5b5c8eb3c41c9
Size 2.1MB
Sample250127-sapdbavjdr
SHA256 b4d38ca8d15ea651ac5e1a5de5d81c4e2edc54845d6ae7a7beb03a243c3965f6
MD5 40b8e98df567505d12e5b5c8eb3c41c9
SHA1 093a496fc229c4fcf6bc6afaac70f64471f06b72
SHA512 cc7ceef31e5d23a760f3473da5fa083752e0cfbaadbf43471392109f7ebb6474fdd46d032cf2cf12c0b49be2b67a4d503c7979b679b4c86572f64933118989fa
SSDEEP 49152:jPvhCER0+roZmUijFtbJ0iODoe4b7qOIDn/OMWgzi/OuhSC5zn:z5CTwTTl0nzOIrmii2ut
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Targets

- Target
  JaffaCakes118_40b8e98df567505d12e5b5c8eb3c41c9
- Size 2.1MB
- SHA256 b4d38ca8d15ea651ac5e1a5de5d81c4e2edc54845d6ae7a7beb03a243c3965f6
- MD5 40b8e98df567505d12e5b5c8eb3c41c9
- SHA1 093a496fc229c4fcf6bc6afaac70f64471f06b72
- SHA512 cc7ceef31e5d23a760f3473da5fa083752e0cfbaadbf43471392109f7ebb6474fdd46d032cf2cf12c0b49be2b67a4d503c7979b679b4c86572f64933118989fa
- SSDEEP 49152:jPvhCER0+roZmUijFtbJ0iODoe4b7qOIDn/OMWgzi/OuhSC5zn:z5CTwTTl0nzOIrmii2ut
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/XL7InstallUIPlugin.dll
- Size 53KB
- SHA256 03014ac037b73fd97f7d823704d0f6170697e2c330b5d4d83aaa43e87ef00883
- MD5 caf0bfe7af2519b591980e567923dc12
- SHA1 c407a108d45f0dab53879a8b60c7c9bbdebc16e9
- SHA512 dc65fedee1efe8485e25155181b6c151f01c4acd8efe82d99df93d703d3eaa545e3198515ebd369f19b7a5829c86a8d2152e293f219a2b08db5b38bc3c45419c
- SSDEEP 768:I4v8bZ8SWVkd3XmGZ2oLnnrvEEMOHYwNhreXaD3iLG:Vv8bZ8SW2d3XmGcoLnrvEEMOh1DSq
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 129KB
- SHA256 5fbf78509223bbc7dcdc147b5a9b33d6b46cd7f8ac1edf3643391bf757a6c21a
- MD5 67e17e84235aee33bc5dbc56529c6663
- SHA1 05c794acdf4ee507e81e87c6d57be7aeadb32633
- SHA512 20dd63d8dc7d5b6805637de9f41bbbb0f85722741a43569c2c6672996b115815547b29b402b70845e03dd400f1b6c065add86b9388ad0ec9645b3e5c6e6983ea
- SSDEEP 1536:wFmp63uJOwdof09cKcGKS/Y7kS4YC5Y0XzMGg0XfLxkOnJ509QBJYspRmt5:J6sOj5KNW/4DXwsZ/0eBJYspRmb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $SYSDIR/atl71.dll
- Size 88KB
- SHA256 d422497febaa2fbb83a8a2ec342e08884c5a77fbddabde7bec4e21884f56d0ce
- MD5 4edd8d74ea48f58d3eca7e9297f19221
- SHA1 c874f24787c7e487f16113080a80d8241297d5b0
- SHA512 6816c9d43aa3f78bec77d0e9be5e4e549a86f5ca2afaa19167d01763dd15fc7c18db609249e70271b88162460929d7cba13354e38eab0c9b03769fc0b498c32c
- SSDEEP 1536:nrikoNDxHopwlej/A+KZtI+nG+efsCPJOnb/lDwT/XvTjZoxzvN4Zwm7aI5Y:u8pwBI+tefsnb/lDY/X/KVv6Zwm/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $SYSDIR/msvcp71.dll
- Size 492KB
- SHA256 6c483cbe349863c7dcf6f8cb7334e7d28c299e7d5aa063297ea2f62352f6bdd9
- MD5 a94dc60a90efd7a35c36d971e3ee7470
- SHA1 f936f612bc779e4ba067f77514b68c329180a380
- SHA512 ff6c41d56337cac074582002d60cbc57263a31480c67ee8999bc02fc473b331eefed93ee938718d297877cf48471c7512741b4aebc0636afc78991cdf6eddfab
- SSDEEP 12288:b692dAsfQqt4oJcRYRhUgiW6QR7t5k3Ooc8iHkC2ek:bSYACJcRYe3Ooc8iHkC2e
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $SYSDIR/msvcr71.dll
- Size 340KB
- SHA256 c4d4339df314a27ff75a38967b7569d9962337b8d4cd4b0db3aba5ff72b2bfbb
- MD5 ca2f560921b7b8be1cf555a5a18d54c3
- SHA1 432dbcf54b6f1142058b413a9d52668a2bde011d
- SHA512 23e0bdd9458a5a8e0f9bbcb7f6ce4f87fcc9e47c1ee15f964c17ff9fe8d0f82dd3a0f90263daaf1ee87fad4a238aa0ee92a16b3e2c67f47c84d575768edba43e
- SSDEEP 6144:cPlV59g81QWguohIP/siMbo8Crn2zzwRFMciFMNrb3YgxS3bCAO5kkG:OlVvN1QWguohInJDrn8zwNF7eCr
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $TEMP/XL7InstallUI/XL7InstallUI.dll
- Size 182KB
- SHA256 1df8bc8d3decbef103288d48065ac3ed9b7a1092404f66aabc99801ffdbe48fa
- MD5 366b17e0a79358d3c5ba40b3b1d10be4
- SHA1 8183920cae3009241fa323ab525a83b22bea4db1
- SHA512 aa58bcff32b8f968f4adbffd3b6752976b4bcb97f35c82e2fa96f3b23cf0ca4ba74d4071060d0e7901286b336c2cc28a1061a911916226a4dac78d555b314f94
- SSDEEP 3072:bICLSebj8K0/XfMZdsK9S6zLMgm5nuBVo+L48Iwa79ZNKQgpT/:ZbgK0/XfMH+C6+U79ZNK5T/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $TEMP/XL7InstallUI/XL7InstallUIPlugin.dll
- Size 53KB
- SHA256 03014ac037b73fd97f7d823704d0f6170697e2c330b5d4d83aaa43e87ef00883
- MD5 caf0bfe7af2519b591980e567923dc12
- SHA1 c407a108d45f0dab53879a8b60c7c9bbdebc16e9
- SHA512 dc65fedee1efe8485e25155181b6c151f01c4acd8efe82d99df93d703d3eaa545e3198515ebd369f19b7a5829c86a8d2152e293f219a2b08db5b38bc3c45419c
- SSDEEP 768:I4v8bZ8SWVkd3XmGZ2oLnnrvEEMOHYwNhreXaD3iLG:Vv8bZ8SW2d3XmGcoLnrvEEMOh1DSq
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $TEMP/XL7InstallUI/XLFSIO.dll
- Size 197KB
- SHA256 c70ccf673ced65d97577168435513e2472926eb8d861bfcb26e059aaed5d95e7
- MD5 a692d6686d480587fcb743e942078877
- SHA1 f189b0c47a2ca5f5b9644172c45ca78f4fd868cd
- SHA512 56ed5719f26c464524ccb2a6a6030973b99e8fea6d63420900df8c927703853d10c98c195e130f48a62207755c5df98052430047bb13f202fc8b043b4e92d6cf
- SSDEEP 6144:svudZ2fUFXxuW8ee/7vtZ+StOTBfW8QXx:svud0fcxuYe/rb+StOTBWV
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  $TEMP/XL7InstallUI/XLGraphic.dll
- Size 697KB
- SHA256 6ba08f9016e3f6600e7a26721a54198d4af0ea543fc21acb034b192f28978507
- MD5 7fe3bb32d3bfb2ae0850647372a425e1
- SHA1 b238531617387464907161744720fe4c5b445bd9
- SHA512 03674c301a9d2c6c795d898c6a880c33d2ae2db66cb963b46fd8dfc71f08f62838520355fcff98852b3510807f04b7416860951590cb6288af3dac99c8f5b9d1
- SSDEEP 12288:9B5YXuP7Uc4Rg9bFvSlr6o1L6NvTnxkOhn/tagWDHhF2LgAN4Hk:v5RP7UcOSb8VmvTnxk+kgWbhAcjE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  $TEMP/XL7InstallUI/atl71.dll
- Size 88KB
- SHA256 d422497febaa2fbb83a8a2ec342e08884c5a77fbddabde7bec4e21884f56d0ce
- MD5 4edd8d74ea48f58d3eca7e9297f19221
- SHA1 c874f24787c7e487f16113080a80d8241297d5b0
- SHA512 6816c9d43aa3f78bec77d0e9be5e4e549a86f5ca2afaa19167d01763dd15fc7c18db609249e70271b88162460929d7cba13354e38eab0c9b03769fc0b498c32c
- SSDEEP 1536:nrikoNDxHopwlej/A+KZtI+nG+efsCPJOnb/lDwT/XvTjZoxzvN4Zwm7aI5Y:u8pwBI+tefsnb/lDY/X/KVv6Zwm/
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $TEMP/XL7InstallUI/libpng13.dll
- Size 224KB
- SHA256 ce3e85b33fdfd9d7f9647fe6df7395ddd11cf1f82b9ab479312289c8fa0cea26
- MD5 bb679fccd0e8280f5d5504de9903b3e8
- SHA1 71618dff69e0605c791ec736331fa699307574fe
- SHA512 40bce8c7ae81c0b3506681ae20962326b2fd3bcd9f4cc4a2625b87e42163823dfbe9282789d2ce0b3e0d66e093a3e885651626dbad8db6d513b32f20d8591aec
- SSDEEP 3072:GWn5Kk09OAyMLd0oJyHUCH8AXVYjq5T9wPpZ8EVB/EWC/wKYJVP8FoMkLttA50sP:gCcAXVYjq5ZG8EVB/FCl+Z5MkLjaJ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  $TEMP/XL7InstallUI/minizip.dll
- Size 19KB
- SHA256 7d7a5fe1bbcdd0d8acb8aedaedcaf12eb9cae75b6ebe9443a334c885cf95e23a
- MD5 6cac2d9c5388686bec06a80e3c4a611d
- SHA1 42fb0f88dfa6bab83b2c0b9e050c3f7136e84c32
- SHA512 f46339dd7ecf1868df9a99eee70c6b4e85da07466aae6c5e2a036f382966115fe38972a5f20f1e3689981617ab0f976543334850863d7ae7fbf61f56bafc7b63
- SSDEEP 384:zIwtkFPJWpRctYjG4mnisZ3sLLhMDIVleTWtl1J0G:xkFhwJ1TsZ3sLLh2IVHN0
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  $TEMP/XL7InstallUI/msvcp71.dll
- Size 492KB
- SHA256 6c483cbe349863c7dcf6f8cb7334e7d28c299e7d5aa063297ea2f62352f6bdd9
- MD5 a94dc60a90efd7a35c36d971e3ee7470
- SHA1 f936f612bc779e4ba067f77514b68c329180a380
- SHA512 ff6c41d56337cac074582002d60cbc57263a31480c67ee8999bc02fc473b331eefed93ee938718d297877cf48471c7512741b4aebc0636afc78991cdf6eddfab
- SSDEEP 12288:b692dAsfQqt4oJcRYRhUgiW6QR7t5k3Ooc8iHkC2ek:bSYACJcRYe3Ooc8iHkC2e
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  $TEMP/XL7InstallUI/msvcr71.dll
- Size 340KB
- SHA256 c4d4339df314a27ff75a38967b7569d9962337b8d4cd4b0db3aba5ff72b2bfbb
- MD5 ca2f560921b7b8be1cf555a5a18d54c3
- SHA1 432dbcf54b6f1142058b413a9d52668a2bde011d
- SHA512 23e0bdd9458a5a8e0f9bbcb7f6ce4f87fcc9e47c1ee15f964c17ff9fe8d0f82dd3a0f90263daaf1ee87fad4a238aa0ee92a16b3e2c67f47c84d575768edba43e
- SSDEEP 6144:cPlV59g81QWguohIP/siMbo8Crn2zzwRFMciFMNrb3YgxS3bCAO5kkG:OlVvN1QWguohInJDrn8zwNF7eCr
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32