1369f48ff4dc39f004d9beff71ca942f7fa4d41f41fecc5edce3ef5af15b4912

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_1369f48ff4dc39f004d9beff71ca942f7fa4d41f41fecc5edce3ef5af15b4912.bin
Size 904KB
Sample261002-mlny2azybs
SHA256 1369f48ff4dc39f004d9beff71ca942f7fa4d41f41fecc5edce3ef5af15b4912
MD5 829b72f5cd2ec51dcc0aa88ccec32e7c
SHA1 1c43a1caa8da31db71004cc575eb5506e073d1e8
SHA512 12268b42529493e86511caa60e8e14018629e74baaed67d9ae5651c43842d1ae4db9d9e96a95f3fbb8a19d56c94f05064b3b34766d59280c3a69469585fba458
SSDEEP 24576:Kp1FPrXF+CULnf9LrPPc8wmCPVDxgHEOn:KhrkCunf9LrPuVVmkOn
TLSH
T1BB1512167A4CE4C2DA2682369C1FEE664DC17D399B8066DF33E4B36F34B23A5561F042
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jaffacakes118_1369f48ff4dc39f004d9beff71ca942f7fa4d41f41fecc5edce3ef5af15b4912.bin
- Size 904KB
- SHA256 1369f48ff4dc39f004d9beff71ca942f7fa4d41f41fecc5edce3ef5af15b4912
- MD5 829b72f5cd2ec51dcc0aa88ccec32e7c
- SHA1 1c43a1caa8da31db71004cc575eb5506e073d1e8
- SHA512 12268b42529493e86511caa60e8e14018629e74baaed67d9ae5651c43842d1ae4db9d9e96a95f3fbb8a19d56c94f05064b3b34766d59280c3a69469585fba458
- SSDEEP 24576:Kp1FPrXF+CULnf9LrPPc8wmCPVDxgHEOn:KhrkCunf9LrPuVVmkOn
- TLSH
  T1BB1512167A4CE4C2DA2682369C1FEE664DC17D399B8066DF33E4B36F34B23A5561F042
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/ButtonEvent.dll
- Size 4KB
- SHA256 5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
- MD5 fad9d09fc0267e8513b8628e767b2604
- SHA1 bea76a7621c07b30ed90bedef4d608a5b9e15300
- SHA512 b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
- TLSH
  T1EF81523B97A026F1C640273B53D71E629B3BD1302316B02D8DD32D0CA93055BEC29743
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/CustomBrandingURL.dll
- Size 5KB
- SHA256 2c33db8babc38e9c824d025b594626dfeee67c5319dc93396239899647f87156
- MD5 e4c1b74859c17671ffe1c0602fd56b44
- SHA1 15ae7d83122a1dc14d79e6c0a2e6565a9ffc12d1
- SHA512 9dda77eaa71371d3e1d068d3740435b5aa3f198818e46ae31e19cab8b084bb131e088241abf1a0f7f78179745a1665a9bf500f97ee25cafc7f85c5a1c234a925
- SSDEEP 48:SMq1qEwUNRYDeKPTeKp4GN8C8hgIV2f4ag5pmy8WywlhQ7sp9CSC2bH:hq1q/QPKSKp4m80i2QGpvwLXLCtGH
- TLSH
  T1A7B1FA3A73C645F3D73302326A631967BBB945120352901FD6AB17E9F790D2BC801763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/CustomNSISdl.dll
- Size 40KB
- SHA256 dcee4695192b17a77ca40f63234298fa02326bde2a2a34bab373ac5cc2fc5f48
- MD5 bb81b9946ffc1e50b7a052cd00ac2690
- SHA1 0deb5a4c1effa39d22e89199dbb1e6695246848f
- SHA512 9c1e9fcac43aa41cf6db56557a7d720db52013b78e048ffa821e608868c2bc97d30aa9087047a5faaaed39655759da0d6fd6097f273c30ce51b0f0963c8a739c
- SSDEEP 384:kBrBOvI88qsfnZsFTyQ0mipmycAC/hZAOT8pA40PIL1lBlE:kBrmB8qsfnZeTyQ0mZ7h26g1d
- TLSH
  T10B13B321D211F03FF4F3297A53EF176AA46852B8270624C734D8EA9ABBD45DBBD31106
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/CustomnsWeb.dll
- Size 42KB
- SHA256 39fefafc4ede6838061b804a44b0416ed4929c3c3ff9e64b1e0956186734094f
- MD5 f705fa42cb1edf73153cfe6bef657387
- SHA1 24462c7b144ecb7778ca7a93b9e1dd62464ea81a
- SHA512 d993d37b53b60a009021154e5032965c29789fbb8d7b0907dc0877f36abe5d7456a33a8e3111158ee82fd306d24d3aeabe81be776ca5d2f09b8413ff437aa936
- SSDEEP 384:Rl9jSW3OJO9zbkU3UjVzU2QSvA5q/8Bigip:RHjxOJO95mVzjQCAU/S
- TLSH
  T10913D99CAC06862AF8B2417E46B8D527726EDD14B314BEF7205C1D126DAF1F329B1CD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/FloatingProgress.dll
- Size 4KB
- SHA256 5caf7bccc7fb43e43a50676a2466803cfb531f6416c6cb797750513770da6e18
- MD5 15bddd79574770cdbab1a9c13832d344
- SHA1 dd63bf21db7049ba9773d0d06dbbb2d9b1ae914e
- SHA512 52f29c250a2426f43b67577ed5efe17992fa9ccb361cd1ad6ec19a60b02e2b7ee1c5a8131a29e37f84636d30916d6d2018ac769483861d1da3b0a1f4c91eb87b
- SSDEEP 48:SBn9+qyt9ofRgODb/ZfKVT60l/5Lh4VzQqO3rwBRbN5:g2k+O3/PIhIc10BJN
- TLSH
  T1B191863263E0CCF6F47A1673195328E5A3B5A53027A8560F5A9F42CA6505C4BED7C723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/GuiInit.lua
- Size 52KB
- SHA256 fb5ba79ff4d1f26ea5e6694e96b116c22ec4d4891a4589eaf678553ef27b9bb0
- MD5 1092b5a562b2c7efd2970f9f0fe749e3
- SHA1 b644f37a985ff9ba9bbedd5d3afa4c3bc61885ba
- SHA512 e21ed6d29e2d1958df5b663d31db178ea53811fdf5bc718346f2ed2f5adf07f23454fab8958bcae329b6820fcc01590eb5462de57a200e13672f282ecc76c847
- SSDEEP 768:hyrQoaguQ2IsIsEq3qmTpMIkkR0Xa3b+HdXshnUNiSopNgTXZ:pxguCBRTmTH3b+MUYBpN+p
- TLSH
  T10E33945B72816A313EF2C26A9ECF1486EB2440630765A135B5DC42D43FB115CA2F6BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  $PLUGINSDIR/IntegratedOffer-Pickle.html
- Size 4KB
- SHA256 11c73ab6112a853e0930dc971f1fdf1be961a01132e5517c4069c7b31fb31d62
- MD5 de86492c97e8d6a1fb60760c7a539a25
- SHA1 848a17f2882e46f38164cc23ad7183fe670c5c77
- SHA512 ed3cc509e8935f5a0edcf613de31f6bfaea988368ff9634ca8e2e888937aa2f2c37d97ba33eaa3a61a25882c9ee30a52aff216cb642403eb685dce9bb82daf08
- SSDEEP 48:Z4YnnBZJOnQFFfG9mEDe9DR9vAyB/CTE5AeApzVLVoBskL7/C023xPb:HJOnQ3ewEe39v9dyE5jSzZCBsk4
- TLSH
  T137919A6098E84A3651B381859DF55F8BFE928203C70BAA1036EC1BD35FF7C05CC9B129
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/LuaBridge.dll
- Size 12KB
- SHA256 c26d867114a04c677ef9ac35d83c2d362c1fb9ff8d46abfb785d71a48cb9c309
- MD5 9781b7bb06ea11ebce5dc9d57b3437a3
- SHA1 604123977fffadebfefccae08df6b8e2e5dbab82
- SHA512 666125abfb144665506e1085793656f31708211b940efca8188a5b20d57a058dcae10ec274a7614450f7b66854c9239c2838e61b3721c10482710a2008b681d7
- SSDEEP 192:P4OMsEUVhX/Lk4qmpG1KN8v5Qu1Pbt91TVwxlXMmt9bwg6os4Ian:gJs1bvLbpYaYFPRKl8HgPIa
- TLSH
  T13F42D745A71004B1DE9540B17077AF128AFA790172C3185ADF5FBA893D62B929F3F34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/LuaSocket/lua/ltn12.lua
- Size 8KB
- SHA256 b1864aed85c114354b04fbe9b3f41c5ebc4df6d129e08ef65a0c413d0daabd29
- MD5 e440044afe6c761507a996b5b45ab0f9
- SHA1 ef772c758fd5d6098b41375f35ac26f3963cc306
- SHA512 8a82df90459929de1c91ed29a122a149749d42adbb85faf0c3123d0f0886babc90cb93de85105feb7497b46552a6747ae05b985f5a488d1d8f1a2a7db44077b4
- SSDEEP 192:PYfxR7f6v6kObk2D0P9+INoAlEEvKbMEMuWKlrSDrGXJ5GPYbo8+b2uP0XJUMwsr:PN6kObkyar5libMv+sCorbrMwsDiDK
- TLSH
  T1B002BB8A3D86F1B569F2DA99984B6401F1668853827A0164FC1C94D43F3026DF3FEFB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  $PLUGINSDIR/LuaSocket/lua/mime.lua
- Size 2KB
- SHA256 e9167e0da842a0b856cbe6a2cf576f2d11bcedb5985e8e4c8c71a73486f6fa5a
- MD5 4bfdaaab9014fe129bc6388fd5687c8f
- SHA1 2c6ff28245e1dc7ec9ac1c43c3cda354d07b2c4a
- SHA512 3a1a4d838bb5cafe71da262ee7bd6dccbd30dd4d7abe0d04f6ecf96bf704d5e111967be812894a47f2eb3374ee110620b7cc47eebac8b72ddcf7f506ba82a607
- TLSH
  T1CB51E260BDC3B4E1E4E3E856D19F5814F0692817103512A1BC4D16971B7357AE2FF6F8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  $PLUGINSDIR/LuaSocket/lua/socket.lua
- Size 4KB
- SHA256 15fd138a169cae80fecf4c797b33a257d587ed446f02ecf3ef913e307a22f96d
- MD5 74dbe1060e91112e1c21ef9870b4a587
- SHA1 86afb6aecb0a8387ffa5dead1cc9808332f94310
- SHA512 73218ebb2ad27d3402173054be997089549698d9112acb4b1c9fe044689a40ceda3df00304d336d2034e61c04832f52d971509240414838841d40f53fc0c3723
- SSDEEP 96:LGvAOKAXAHPAF8AHnAHqUNaewVMw7MlvMncAlMNAA/:GWaoP3onoqBJVv7Yv7Qz0
- TLSH
  T1D781668DBDA3F265BAF3E694998B2005F176845312781106F85C80A17F7251DE3FEBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/ftp.lua
- Size 9KB
- SHA256 26167d7c0f511cca7691ca5ad6ebf85b4427b94ef12e110ba1da75f023db8acd
- MD5 4f83a72dc82a78cad6eb7edbe7d2f152
- SHA1 486dd564c3b2ac467e3eabfad806308f14fabb5f
- SHA512 a5ca1c8955a450a727950d91b720895db55f425f2531bc2d2d17034363961ed52b6cc086289f966ac3c27b056452ab5126ec7d9bb34cf5a92fdf0f725f40781d
- SSDEEP 192:GsooRaLonJfMxBs6gZO2zMAcTcGZqx6iOaBqzw58GkJ1YtWKpUM7+C26a8RqN:GsRaLonJYszU2zncTHZ7iOaBRkfYtppO
- TLSH
  T16A12ED4AAC87C69165B3C562944B6803F31F5113966C160739BC87E2BF3092E36FEEA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/http.lua
- Size 12KB
- SHA256 d10fbef2fe8aa983fc6950772c6bec4dc4f909f24ab64732c14b3e5f3318700c
- MD5 7bd12178adca19b584ed1320fdae1e81
- SHA1 839753d73984bda68047585bbc36f9344f51c34d
- SHA512 634428c0e7dc62e7c44f60586c0ab0cedb8b55d9e7f2432f7f681aa58e0a8a444168d104d25c51b7839c06817f83f52a7baa4a0e45df6db283d6d5aa0d5e424e
- SSDEEP 384:x7/thyc+f7zLajrZhVoaOt2yyViz/vcvwkD:F/thyc+f7zyoaOt2yqiz/avD
- TLSH
  T194421147BD83B060F9F2C255E9871A06F26A902354291095F8BC42DE3F711ACD3FDBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/smtp.lua
- Size 8KB
- SHA256 04a2bcc6eb8be03803f7ea4c9aa32e6f70f97fdb6b3bc5ecc5e990cc9932ac90
- MD5 29a883b6fb47f87609d0a5b1973aa45b
- SHA1 6a36815a72d6d7e6c9ac987461e195d17ff979db
- SHA512 c5c648445ea950d58affbacc8b299f26e80b55c4027195cdc055e7d2ee7e3593a59cb36fba8b8dbb8861603d5a03d9867065052b6a3bfd18590a8bd9dd96aac5
- SSDEEP 192:hsbQbmId+aSnZwS/UjGf1MT+IsZDOD4GuuJQwDTaBrW:MH8jk1MTrsZDODhuuJIi
- TLSH
  T1FD02014E9C82B16414B3C5A6D44B3847E21B5103492D1156B1BC86E7EFB05ADF2EFEBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

defense_evasion execution
behavioral29 behavioral30
- Target
  $PLUGINSDIR/LuaSocket/lua/socket/tp.lua
- Size 3KB
- SHA256 343afa62f69c7c140fbbf02b4ba2f7b2f711b6201bb6671c67a3744394084269
- MD5 2cad406e591cade482c7f16f39c21481
- SHA1 84a3ab88ff7a9102c2c6d21bdb6eede6862167a4
- SHA512 ecc98991c25036b54f2bb71b3229e4bc8fb401e55db0e5f9c958c2a7b00b40fc9ae2d7e45002d4f2a03cec85535785c42ab6d20476fe095a76444d143493b145
- TLSH
  T1A271CB867C43F6A4A9F2C665A55B950AF1BD4513012C0085BC8CC1F6BF312ACA3FE7B8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32