Overview

overview

8

Static

static

3

e9cd2656eb...18.exe

windows7-x64

8

e9cd2656eb...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    e9cd2656eb4f91edd1bb125866abff70_JaffaCakes118
  • Size 198KB
  • Sample240409-mp3llach53
  • SHA256 7dd668c6dbd0c6bb3ed450f7ac2abb8e0030b53ef92a07af2b1a0a14cbc6e358
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target
      e9cd2656eb4f91edd1bb125866abff70_JaffaCakes118
    • Size 198KB
    • SHA256 7dd668c6dbd0c6bb3ed450f7ac2abb8e0030b53ef92a07af2b1a0a14cbc6e358
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    adwarepersistencestealer

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks