489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4.bin
Size 838KB
Sample261002-ml7fdagd34
SHA256 489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4
MD5 2cf9c16a2d3dfc2ba80abfa3e5ce901b
SHA1 428f67a0363227262d08dbe8b25c679cffdd7512
SHA512 e82e65f7aedfc4eced938c02c0438ebacf9e211fb5a9bfe3980210169fa7c933cb6a605cc3bf357c6d9012b5bed050c2c6987c010a612bf39f923fb4de145994
SSDEEP 24576:Kp/ulc2/5kP2J4+sJ4sEL1jjs+THx3IIxa2CJ:Kox5k84+yDEL1jjtTH543J
TLSH
T1340512413A0CA4D2EA5E4235AC5F9E56CAD17D795B8066EF33A5F7DF30B22B2432B011
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  jaffacakes118_489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4.bin
- Size 838KB
- SHA256 489b0c338b4f7bf84b3ef8e0f5516b5851f5db1a466ea676740d1e3a726296f4
- MD5 2cf9c16a2d3dfc2ba80abfa3e5ce901b
- SHA1 428f67a0363227262d08dbe8b25c679cffdd7512
- SHA512 e82e65f7aedfc4eced938c02c0438ebacf9e211fb5a9bfe3980210169fa7c933cb6a605cc3bf357c6d9012b5bed050c2c6987c010a612bf39f923fb4de145994
- SSDEEP 24576:Kp/ulc2/5kP2J4+sJ4sEL1jjs+THx3IIxa2CJ:Kox5k84+yDEL1jjtTH543J
- TLSH
  T1340512413A0CA4D2EA5E4235AC5F9E56CAD17D795B8066EF33A5F7DF30B22B2432B011
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/ButtonEvent.dll
- Size 4KB
- SHA256 5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- MD5 fad9d09fc0267e8513b8628e767b2604
- SHA1 bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA512 b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
- TLSH
  T1EF81523B97A026F1C640273B53D71E629B3BD1302316B02D8DD32D0CA93055BEC29743
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/CustomBrandingURL.dll
- Size 5KB
- SHA256 2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156
- MD5 e4c1b74859c17671ffe1c0602fd56b44
- SHA1 15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1
- SHA512 9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925
- SSDEEP 48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH
- TLSH
  T1A7B1FA3A73C645F3D73302326A631967BBB945120352901FD6AB17E9F790D2BC801763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/CustomNSISdl.dll
- Size 40KB
- SHA256 dcee4695192b17a77ca40f63234298fa02326bde2a2a34bab373ac5cc2fc5f48
- MD5 bb81b9946ffc1e50b7a052cd00ac2690
- SHA1 0deb5a4c1effa39d22e89199dbb1e6695246848f
- SHA512 9c1e9fcac43aa41cf6db56557a7d720db52013b78e048ffa821e608868c2bc97d30aa9087047a5faaaed39655759da0d6fd6097f273c30ce51b0f0963c8a739c
- SSDEEP 384:kBrBOvI88qsfnZsFTyQ0mipmycAC/hZAOT8pA40PIL1lBlE:kBrmB8qsfnZeTyQ0mZ7h26g1d
- TLSH
  T10B13B321D211F03FF4F3297A53EF176AA46852B8270624C734D8EA9ABBD45DBBD31106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/CustomnsWeb.dll
- Size 42KB
- SHA256 39fefafc4ede6838061b804a44b0416ed4929c3c3ff9e64b1e0956186734094f
- MD5 f705fa42cb1edf73153cfe6bef657387
- SHA1 24462c7b144ecb7778ca7a93b9e1dd62464ea81a
- SHA512 d993d37b53b60a009021154e5032965c29789fbb8d7b0907dc0877f36abe5d7456a33a8e3111158ee82fd306d24d3aeabe81be776ca5d2f09b8413ff437aa936
- SSDEEP 384:Rl9jSW3OJO9zbkU3UjVzU2QSvA5q/8Bigip:RHjxOJO95mVzjQCAU/S
- TLSH
  T10913D99CAC06862AF8B2417E46B8D527726EDD14B314BEF7205C1D126DAF1F329B1CD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/FloatingProgress.dll
- Size 4KB
- SHA256 5caf7bccc7fb43e43a50676a2466803cfb531f6416c6cb797750513770da6e18
- MD5 15bddd79574770cdbab1a9c13832d344
- SHA1 dd63bf21db7049ba9773d0d06dbbb2d9b1ae914e
- SHA512 52f29c250a2426f43b67577ed5efe17992fa9ccb361cd1ad6ec19a60b02e2b7ee1c5a8131a29e37f84636d30916d6d2018ac769483861d1da3b0a1f4c91eb87b
- SSDEEP 48:SBn9+qyt9ofRgODb/ZfKVT60l/5Lh4VzQqO3rwBRbN5:g2k+O3/PIhIc10BJN
- TLSH
  T1B191863263E0CCF6F47A1673195328E5A3B5A53027A8560F5A9F42CA6505C4BED7C723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/GuiInit.lua
- Size 33KB
- SHA256 db891bd456faae03612ed19ce50095b666ed9c386ad35c20fa2d8a7434dc5e68
- MD5 44879782a55b78d19f276043f07262dc
- SHA1 ac89be828dff110297db3bce418b8e380592eaad
- SHA512 8554127a9c7cb357f99353d3ecf8d8493ac1025fa1c4b6bb711fa042609910b7d086447f98d6bde676b1f8bad841c56605acfe1547d3951df7a8cdb5083294b8
- SSDEEP 768:sYoHyuV2IsI8kzmTxMokkhj5fM9j+Vs5+YyIx:fwyupBRzmTF09j+nYJx
- TLSH
  T13DF2B54B72C16A723EF2836A5E8F1895F62144130636A578B6DC42C43F7525CA2F37FA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  $PLUGINSDIR/IntegratedOffer-Truste.html
- Size 9KB
- SHA256 8ff0e2ef8d8f772602ee4961bc5fd5fe0cff2dc2da550e537f3cb7112665224a
- MD5 ea4501376a82bbf5e1eaa3ac87e33f04
- SHA1 f54364a23230c6da027701cf801e233530fde116
- SHA512 96494df75e25f4e625dcacaf51bfa956b44068edc5a72311cb7a5f405a171c67bec3cd596f643fbfbd36d0cf4c733e108394f738769e288c525f73bd9e36f4b9
- SSDEEP 96:dsEkV5dynO/34r5kGk1wqJqt49JOnQlVewEe399xkEEl93s5SzZCBskp:v65InW34kGka8a4OqnHrxbEl93fMBN
- TLSH
  T1C8222F5488D406159033A296DFB14B4EEE628147C347A6083BFCAB939FB7D49C847BE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/LuaBridge.dll
- Size 12KB
- SHA256 959c090aa0c41925dbeafbbd455cd766f8d3b8d62ad47b8f8a0116ad542efe79
- MD5 8e11ed4d0b151add7e69bdd36bdfe349
- SHA1 6cddd66e26a3a2d98b32f5db6f39e6a32f9b3807
- SHA512 4eeac9ce126c87b068d412b72c8c6c73ba5160b39f9f302aa5c16014cbc9d5c4dbbfb0881c65736c85131266f18b5f5814bdff0de5e602b91b9972802b8c0fcc
- SSDEEP 192:i7eFv+UTmEZbZIPlKt5tswGZQu1PQrnWVwxlhgzNpkfnT:iOvHTXZbStWu/lPQr7lOzNCT
- TLSH
  T1F742F801632104B1DF9501B1B077BF128AFA780172C3585A9F5E66893D63B96DF3B78B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/LuaSocket/lua/ltn12.lua
- Size 8KB
- SHA256 b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
- MD5 e440044afe6c761507a996b5b45ab0f9
- SHA1 ef772c758fd5d6098b41375f35ac26f3963cc306
- SHA512 8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
- SSDEEP 192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
- TLSH
  T1B002BB8A3D86F1B569F2DA99984B6401F1668853827A0164FC1C94D43F3026DF3FEFB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  $PLUGINSDIR/LuaSocket/lua/mime.lua
- Size 2KB
- SHA256 e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
- MD5 4bfdaaab9014fe129bc6388fd5687c8f
- SHA1 2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
- SHA512 3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
- TLSH
  T1CB51E260BDC3B4E1E4E3E856D19F5814F0692817103512A1BC4D16971B7357AE2FF6F8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  $PLUGINSDIR/LuaSocket/lua/socket.lua
- Size 4KB
- SHA256 15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
- MD5 74dbe1060e91112e1c21ef9870b4a587
- SHA1 86afb6aecb0a8387ffa5dead1cc9808332f94310
- SHA512 73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
- SSDEEP 96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
- TLSH
  T1D781668DBDA3F265BAF3E694998B2005F176845312781106F85C80A17F7251DE3FEBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
- Size 9KB
- SHA256 26167d7c0f511cca7691ca5ad6ebf85b4427b94ef12e110ba1da75f023db8acd
- MD5 4f83a72dc82a78cad6eb7edbe7d2f152
- SHA1 486dd564c3b2ac467e3eabfad806308f14fabb5f
- SHA512 a5ca1c8955a450a727950d91b720895db55f425f2531bc2d2d17034363961ed52b6cc086289f966ac3c27b056452ab5126ec7d9bb34cf5a92fdf0f725f40781d
- SSDEEP 192:GsooRaLonJfMxBs6gZO2zMAcTcGZqx6iOaBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7iOaBRkfYtppO
- TLSH
  T16A12ED4AAC87C69165B3C562944B6803F31F5113966C160739BC87E2BF3092E36FEEA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/http.lua
- Size 12KB
- SHA256 d10fbef2fe8aa983fc6950772c6bec4dc4f909f24ab64732c14b3e5f3318700c
- MD5 7bd12178adca19b584ed1320fdae1e81
- SHA1 839753d73984bda68047585bbc36f9344f51c34d
- SHA512 634428c0e7dc62e7c44f60586c0ab0cedb8b55d9e7f2432f7f681aa58e0a8a444168d104d25c51b7839c06817f83f52a7baa4a0e45df6db283d6d5aa0d5e424e
- SSDEEP 384:x7/thyc+f7zLajrZhVoaOt2yyViz/vcvwkD:F/thyc+f7zyoaOt2yqiz/avD
- TLSH
  T194421147BD83B060F9F2C255E9871A06F26A902354291095F8BC42DE3F711ACD3FDBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
- Size 8KB
- SHA256 04a2bcc6eb8be03803f7ea4c9aa32e6f70f97fdb6b3bc5ecc5e990cc9932ac90
- MD5 29a883b6fb47f87609d0a5b1973aa45b
- SHA1 6a36815a72d6d7e6c9ac987461e195d17ff979db
- SHA512 c5c648445ea950d58affbacc8b299f26e80b55c4027195cdc055e7d2ee7e3593a59cb36fba8b8dbb8861603d5a03d9867065052b6a3bfd18590a8bd9dd96aac5
- SSDEEP 192:hsbQbmId+aSnZwS/UjGf1MT+IsZDOD4GuuJQwDTaBrW:MH8jk1MTrsZDODhuuJIi
- TLSH
  T1FD02014E9C82B16414B3C5A6D44B3847E21B5103492D1156B1BC86E7EFB05ADF2EFEBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion execution
behavioral29 behavioral30
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
- Size 3KB
- SHA256 343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269
- MD5 2cad406e591cade482c7f16f39c21481
- SHA1 84a3ab88ff7a9102c2c6d21bdb6eede6862167a4
- SHA512 ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145
- TLSH
  T1A271CB867C43F6A4A9F2C665A55B950AF1BD4513012C0085BC8CC1F6BF312ACA3FE7B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32