6d75dce2fed51d9d13c42a5f44ef7ff8f5e752d41f8749231b281aa61e4cd89c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_UDS.DangerousObject.Multi.Generic.5b5cb3f50baa7ce8a42a12ef57f6be5f
Size 997KB
Sample261014-npys3styhs
SHA256 6d75dce2fed51d9d13c42a5f44ef7ff8f5e752d41f8749231b281aa61e4cd89c
MD5 5b5cb3f50baa7ce8a42a12ef57f6be5f
SHA1 e9b196d9e1a583086bcd1839af6ea3f6fb75e49d
SHA512 2128f44da127f4f85080471c24392f1e1136d2714326277ea887fcf680a518597bc75fc781e17673ddf7eb427367fffa31c54d6ef910ccb32a24b7456ff27380
SSDEEP 24576:poj2/LEil398a5+OwQwt43+ze2Yay2/40aJE:hDEixB5+OwQfOze0y2UJE
TLSH
T1F52533907DC0D4B3DF137530AFA39A150A23A627586753A35BC01FAFC23A6D19E58ACD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  jaffacakes118_UDS.DangerousObject.Multi.Generic.5b5cb3f50baa7ce8a42a12ef57f6be5f
- Size 997KB
- SHA256 6d75dce2fed51d9d13c42a5f44ef7ff8f5e752d41f8749231b281aa61e4cd89c
- MD5 5b5cb3f50baa7ce8a42a12ef57f6be5f
- SHA1 e9b196d9e1a583086bcd1839af6ea3f6fb75e49d
- SHA512 2128f44da127f4f85080471c24392f1e1136d2714326277ea887fcf680a518597bc75fc781e17673ddf7eb427367fffa31c54d6ef910ccb32a24b7456ff27380
- SSDEEP 24576:poj2/LEil398a5+OwQwt43+ze2Yay2/40aJE:hDEixB5+OwQfOze0y2UJE
- TLSH
  T1F52533907DC0D4B3DF137530AFA39A150A23A627586753A35BC01FAFC23A6D19E58ACD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware discovery installer spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  $0/questbasic.dll
- Size 868KB
- SHA256 8637dfb498feb0880402467acc0c55621adf72946e214c01a2e5422200e0972f
- MD5 8aeb09e62f82d311aa04f31837320460
- SHA1 d582b9c6e820e587a5afd094f86638f3e90671d7
- SHA512 11e66e3380ca0718af661eca27ca1001f2cfc78a376c543aa1f1578107c4bddb2b7ba31563708c218121075381dff470e0319d6e7b0f6501fd14dccadda03523
- SSDEEP 24576:4XdTE0wex8550qXhKzoXf7VWpgQyqcaHJpzuleZKwAFQQKJB5:iwze+56qXhKU74pgQzHe1RKj5
- TLSH
  T18E1523073AABD4F5C4FFB4E360AD9DAD1842D4856FA747086D2D4D2441883AE12ECE7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  $0/questbasic.exe
- Size 22KB
- SHA256 4c5f4c0897c8e765a7bce92914f758bbc276c2256b3d5105bbfb62f59524e81d
- MD5 6973f29c29a3eeee35567657e52f2d53
- SHA1 2efab86aa9d2a1c323dbc761b0a837b922282aea
- SHA512 8e4151c0518fc560e1c4d76e3d6128d551f29a5c5080a32d4593848c3b356fe71149b67ff060c94b81384011bcd7b48d2df036c119a53c1b89ed1a91f8d9d5f0
- SSDEEP 384:qBYaCj8bP0yG60JDIgPURCblLVU107wnq/Hl+uY3vJml:8C4Rd0JDnFRhU107wn2FNisl
- TLSH
  T138A23B23B8929177C88285B049A99A03E73F55061FB04097CF94259FBF726E1AD3E307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $0/uninstall.exe
- Size 78KB
- SHA256 dd1fb0babead3e4cfc4f1c2b6da6e188ade41656cd991dd67ae9080244166896
- MD5 44f90c8f57c78ff549af6ce114277f57
- SHA1 ddf8b6eb49b804f9082b892a439d8bb297f88cae
- SHA512 451072bd2ae46c724da08c6ae8ad44c0ad78d41d16ec17c781f4e155e9e9347583b725ec3597f15a71263931a825e689b4b95141f91652075d69d82b567e4df8
- SSDEEP 1536:PEkjY1zy214Qay0DGkJ7qAELVigJpVjcpDCxH9TplS1N/RA2/DD:8kjAJ4dDGkJ+AI0mguH9TpAN/RX/H
- TLSH
  T16273D10737C098B7C7AA063105BBEBBEFBB7965111216F570B900F6F2A219839A1D15B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Executes dropped EXE
- Loads dropped DLL
behavioral7 behavioral8
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 13KB
- SHA256 551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc
- MD5 d765c492c21689e3d9d61634371fd861
- SHA1 ac200933671ae52c9d5544d0e2e8e9144d286c83
- SHA512 9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f
- SSDEEP 192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB
- TLSH
  T14D525D61738488F3E786063E745237138BD926257CA15DE2C6330FCA6A2718D7EF6342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd
- MD5 fe24766ba314f620d57d0cf7339103c0
- SHA1 8641545f03f03ff07485d6ec4d7b41cbb898c269
- SHA512 60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3
- SSDEEP 192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB
- TLSH
  T18E226C5547A041F3DD60823C08973D272BA837148EA54ED3CFD314429E296A6BCBC336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 13KB
- SHA256 551e6042dd494ea01549555ffc194ab9729da09058ec714eb368dd06642c9bbc
- MD5 d765c492c21689e3d9d61634371fd861
- SHA1 ac200933671ae52c9d5544d0e2e8e9144d286c83
- SHA512 9919a9e848c8f1e26c75d0d29207571e4b86a4140bd554743d2c1f8bd7f386fe4919345b163d89a5d907fb165e435ba0ac5f6b1101713636141f156a420e2e0f
- SSDEEP 192:9B6RvrfvOuJQDghBy/X7QKq3TLGciZJf0EzWzMnz6WoF1dBs:v6RrviWaX7eiZJ7nz6bB
- TLSH
  T14D525D61738488F3E786063E745237138BD926257CA15DE2C6330FCA6A2718D7EF6342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 802ef71440f662f456bed6283a5ff78066af016897fe6bfd29cac6edc2967bbd
- MD5 fe24766ba314f620d57d0cf7339103c0
- SHA1 8641545f03f03ff07485d6ec4d7b41cbb898c269
- SHA512 60d36959895cebf29c4e7713e6d414980139c7aa4ed1c8c96fefb672c1263af0ce909fb409534355895649c0e8056635112efb0da2ba05694446aec2ca77e2e3
- SSDEEP 192:rO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1aMBgMO:yKAFERdlxhGRYUzqZaMB
- TLSH
  T18E226C5547A041F3DD60823C08973D272BA837148EA54ED3CFD314429E296A6BCBC336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Reads user/profile data of web browsers

Checks installed software on the system

Drops file in System32 directory

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16