59f8bf634562795a0ae5ab628e360585b4f0599efbb2ce3927d8474fbe681164

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_59f8bf634562795a0ae5ab628e360585b4f0599efbb2ce3927d8474fbe681164.bin
Size 1.9MB
Sample260925-xda3bagh73
SHA256 59f8bf634562795a0ae5ab628e360585b4f0599efbb2ce3927d8474fbe681164
MD5 6dd8cc581395622abe5fdad29e7cec33
SHA1 30a70a7325529dddb593b54896d3f5e57a258e89
SHA512 6d3b9a60f4a4c44c3ca0e9e62858842c5c03212e45dd20bd79be0071837b8722f80b2160f4ab41118e89dd2623d8784cd550c5f50d641d8e8bb6beca0f501af4
SSDEEP 49152:DLn9w+ly+qmL4n2eTbIX2LdEMoOv1235dVleEWsOx4tsXEi:u+2DIXwnhI5zl+sHC
TLSH
T1C19533B25C4FC22CF2001A7ADA259805F796256F3D35F3562ABC833D3F5108A5B6768E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jsdata/JSHJ.dll
- Size 63KB
- SHA256 dcd37cc4b182fb08ee1bd0040e8770461eddf53f0496ade65d8102f67dfe6f51
- MD5 c70b20f201c284f61913308d35db5d17
- SHA1 37941c7df20c6d69193fea6e5165f99dc605179d
- SHA512 679456b6795939ccf7ea8edd0dd6b5956be6ab3096eabcaa9aa14f092f6f7fb2abe526ec999b11c0f65fdaf5c7373d5cd6e406ae6693786fe03336d131943b77
- SSDEEP 1536:NjeNReoa4hqepyavkggRnRPD7F5k14G8GlUFeC:NjeNba4hqeD2D7fk/UFeC
- TLSH
  T13B538F12BD90C031F09084F0693E5737EA3FAA240756966B97D4A9ECCEF1550FE0A36B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  jsdata/WinIo.dll
- Size 48KB
- SHA256 d2eb2a40174b9adb3abc768af7fa80882cd1e2ad22303fe4448db89509ac392b
- MD5 6d113aa35a8c79b236751e4ccf2b7751
- SHA1 b4ac97768512acd31e4a824b6595ec2163db7972
- SHA512 f83209d9e98395ae6127f247b7f68167708c1af789a332695feed0f7879d8a83405eed3c3e860e482cebc704a613563bcadfaa8a2986e348d85e50a2e0b3fb68
- SSDEEP 384:XPgsb8J2hTBC6nE5Ig7p+lAK37l6ape8cMAp3XynYHlwouJC6+p8oyx8rd:XPLhTBC6E5gAK3p618sXhHlwodL8oyW
- TLSH
  T161235B4279C201F3D24F427455F6AB37AA7F7A201BE588879BA56E891C721F0E53A303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  jsdata/WinIo.sys
- Size 4KB
- SHA256 e665441a0968e7ee6eb246c4b984ff7449d7905890e55e07f251464d60191a6d
- MD5 7e5a7cf19504af7ddaf4fa36261940d1
- SHA1 baac4c3ce5a46a73dbfbe98c8d89489d04e488a7
- SHA512 d1b226f50a079e2ed40ab5c04098fa11466b914568ba350ea23c0781c37f960e9003ff0ceada80f5c5455ec4dddcd9b44614e667bb774f3a7e12e33052c9498a
- SSDEEP 96:VsXktSPyUFouQWu5GQt3RnP3tzCEKsomeL28L1:2XuHIC7tPeL
- TLSH
  T127A182301796AD17C5C1027AA586133170BAF881376F9B2B20BC64378FDD3EE691530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  jsdata/fx.ucu
- Size 764KB
- SHA256 4d8b5ab87a43e60ce3e78293b296016fc3c31b4951b6ba80abe1d2e857ad0339
- MD5 2b537771b996a3c60d3d51459b80fa11
- SHA1 aa42f278d4f65c69b40824b8938adca06bb7430b
- SHA512 796e07ac4144e947af21f3df8069d6cb273078528d001cb440d6d89e021bc0aa29114aaac3b72a4241d556ac9c1e98c5e58bc6dfd867da7fce243ca2b28b4c63
- SSDEEP 12288:uws4gSJi0t9M+5m5/qoT9gsKYSh8qbcWnNihbJr1d1qdoBBhlBZRbjHWe6zvy88R:v+MMR1tZIR9NkbBHu2BhpFWqv9bT
- TLSH
  T15CF4234EB65DDD9BF4D18CB23FAA4165861E7E0B3D4F3B2F0139935E08F0A209897985
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  jsdata/js.ucu
- Size 764KB
- SHA256 7247b507f7a90a92456b2d4ddd2b61051311e6fe3570833d03a7a4657c5291c2
- MD5 63793d8830e92aff657d92c564f7f480
- SHA1 55c2fda9f361bd8999aca39b2b6ccbe40ffd65fb
- SHA512 05dffa592fabcc230634a8700d17d861c9884669231be3aba950897f43519c9641196a8beb41d3ca7541afb33498a548d3e0a03976efd150a192ddba22015813
- SSDEEP 12288:tUMGwXpGUi+J6TfOeMuPqHzx8vfQNabt9SkYJAN2Q5lO56Hv7+8QfB3sFTf9tc8i:WMGwZGUi+JteYxGINISkUANk5cyjlqrb
- TLSH
  T1E1F42322AB8B2DCBE5D40870137BE7D8C33D661C7DCD6A372618E90E26F9AD11CD1985
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

bootkit discovery persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral10 behavioral9
- Target
  jsdata/jsy.ucu
- Size 193KB
- SHA256 b8919c6e659e3b3a71f245ccbcce00497f00274d41ff854a3201a797e1f151b0
- MD5 34bebf7fa949ac69be6d03db71a355a6
- SHA1 9020bb95c09e8ce387c3b8cee36609a08c4b0bae
- SHA512 ad97249ba437afd9eb248b88ec36216c0f9ef77bf6ce784e1c2255b7d68f5cfabf66d356efd77efce4a63527a5ef21824c04c2f1473a2149f51a0454607babe5
- SSDEEP 6144:iXFsgXoxwszyukNt1SINWNHuU4CEMyJi5NF:GFy7yukNtsiUIMyo
- TLSH
  T1171412277B59AB98C08594BF4B851950B3BCC8A326C5C3072CB4133F2C972A9DF5EB95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  jsq.exe
- Size 216KB
- SHA256 ea9f8b10e3c4e849ed8504b80a0b9554d7d45b46b5aa3684bfebe929656ec439
- MD5 4cd9d5386dd6dbb618add33664eeb1e3
- SHA1 e5703b870208207d4281dd73d2011c48a3c50a59
- SHA512 01d2f789bbd15e71c30a8ca1fcdc3a7b078e9451016afeb9dcbb64704a773e7127031846db1b595216c92807e5a0c29b3213f5ae44b722ad932f46c5e3db5db7
- SSDEEP 6144:+HOc/lpRsmFA+Ia+zIzsfzna5Vc+6A0E:+HzNnsJ+mwVD6
- TLSH
  T1302412AA4C959EEAD05523769D442D73C3ACC908F5E88F63C7E440AD2E252313ED1BD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14