e89bf59c56587b51976943006e1d6bb3be86da8eb6375c88c05ab41813705828

Sharing

Copy URL Twitter E-mail

General

Target
e9f7c9f10731414fcaefdd2437c1caa3_JaffaCakes118
Size 455KB
Sample240409-pfawbsaa2y
SHA256 e89bf59c56587b51976943006e1d6bb3be86da8eb6375c88c05ab41813705828
MD5 e9f7c9f10731414fcaefdd2437c1caa3
SHA1 77953cae142a1558fb15d9104227e3a768721148
SHA512 99778f16ed5cb5f1971c080c8135c9c30c604c9980cb8836650931ec14ac935bbff2c9431006f36b4e5b3f7dae6dd38ce31645fcf586dc38ada425f4f06d5272
SSDEEP 12288:UsGS63bvdwaAw4VtbgVAEUJs/J35/TjVAswf4:UxlDdnEMVATw3pjV3wf4
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

adware stealer

Malware Config

Targets

- Target
  e9f7c9f10731414fcaefdd2437c1caa3_JaffaCakes118
- Size 455KB
- SHA256 e89bf59c56587b51976943006e1d6bb3be86da8eb6375c88c05ab41813705828
- MD5 e9f7c9f10731414fcaefdd2437c1caa3
- SHA1 77953cae142a1558fb15d9104227e3a768721148
- SHA512 99778f16ed5cb5f1971c080c8135c9c30c604c9980cb8836650931ec14ac935bbff2c9431006f36b4e5b3f7dae6dd38ce31645fcf586dc38ada425f4f06d5272
- SSDEEP 12288:UsGS63bvdwaAw4VtbgVAEUJs/J35/TjVAswf4:UxlDdnEMVATw3pjV3wf4
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/DLLWaitForKillProgram.dll
- Size 28KB
- SHA256 ed52bdad7b383a179b9b0e21fefdda2d72695c5263a815d5e1e0bfac6c718548
- MD5 9c4b8ec42d89f7557bfd90798ce52787
- SHA1 2376dde426ea65aa27c30e304086310605382475
- SHA512 17c12a27a08746755868558c037376dd7e20f03f0f71888c1329903b70975a54f57786c3c32bf88aaf30119f11ed978a6830ba91949e11cfc94fbb5ad95305b7
- SSDEEP 96:EP5ZuFye0MyQW4uPwhs+R/+gFrE1m/U/uG98bp2y+HS21kEZ1b+4Tu9C1uGg8wBu:akFyFRQ5wIzlH/UGq36EZY4T+Gul8U
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $PLUGINSDIR/DLLWebCount.dll
- Size 28KB
- SHA256 0a0019b2603dbc4505453c2501255ab0cc0b3c317ece4a6ce0cfb6a02a30907b
- MD5 0bdd7c6f1046ea4b42839f991ae53fb2
- SHA1 cb9baefb10159b4a684fa1ee4372e7715865052d
- SHA512 96f41497f25d7bc81f51ab167f74243b4b767089c89c26f9752ef518fa60dedd2722c66ae87dad2334bcce1622bc12f7b9b892ae654ca58cecd9f35c9f1dc163
- SSDEEP 192:OQoR7CK9FX/dVPWtJ/tXP88bSNwWW8+YdbDT:OQcWeJ/XPWtJxPFYi8nb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5 behavioral6
- Target
  $PLUGINSDIR/IEFunctions.dll
- Size 3KB
- SHA256 3122b0413f74e88518cfd1b9c6e18435dd326ca177a2374b6405df78f43e776a
- MD5 9701818d39318145dd164794ef3a3846
- SHA1 7db701f8dc19163d46ba88e8b68d8dbf428a8152
- SHA512 d92786630250e9eb6c47537b09684fa107f959b50d255c7f3952741eb438c3be47e171827d3a4407b049c33c12dad73f8ec381a7265b28a6d8ca101ff702e8a4
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 1f35bb6728237483c779005fc227e69fef51b0bafd32d15855d483948a337078
- MD5 eef9e469e8a30717974499f277d97e2a
- SHA1 2d33c25984ebd9116beeb55cdde4c5c86c023e5d
- SHA512 d860132106a1c03dfa23f983b3c503f1216ac02f3d47833b96dfb333fb30bc8ab4d4fecd1f1f0a89f0c7f3586405461e2d53c26f282bb48970e549659b364b48
- SSDEEP 192:8np6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTjK72dwF7dBEnbok:8p6UdHXcIiY535zBtMTj+BEnbo
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral10 behavioral9
- Target
  $PLUGINSDIR/KillProcDLL.dll
- Size 36KB
- SHA256 f38c669c87f2a73768a27a01622690997e9d93d5ca3830b349bd24c3ff9f8d2e
- MD5 6958016193a066833556992077bad4fe
- SHA1 5f564945936f99381d7e2408f034f97d069005a4
- SHA512 fd6ab5c341b331b80c940ba97a2cd14547c796933a2df26d3dd87ede1602b86d9f8c37baebd7dd4c68d811199fc96a27ad4cb995bb8889d51af91db9f43ba0a7
- SSDEEP 384:IL6T2Izs/XGCanZSwEfj5lwTSYlml89oayKA15JiQNRw/9uosAUdJofiiqd:88Y9gZSwq1lwTS2XA15DRm9cddJo6l
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  $PLUGINSDIR/SelfDelete.dll
- Size 24KB
- SHA256 c0ad2c13d48c9fe62f898da822a5f08be3bf6c4e2c1c7ffdf7634f2ca4a8859e
- MD5 7bf1bd7661385621c7908e36958f582e
- SHA1 43242d7731c097e95fb96753c8262609ff929410
- SHA512 8317af5cc3ac802eb095f3fa8cc71daa1265ca58fead031c07872f3d4bb07663a7002ae734fad392a7617f0923fe0caf1f54ed55afdf8516a6a08e202d86fa7f
- SSDEEP 96:1dIrJYYrzPpqAAZ9sNIaI2y9WulXEGNRrG:nuYATpq/viyYuEYRr
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral13 behavioral14
- Target
  $PLUGINSDIR/SetHoldData.dll
- Size 96KB
- SHA256 4c8869ff8cbdd2f9a6a2d2876194869664d0e3f554886451224ff4e732136365
- MD5 e86d36c5332858061cc519e7bb558f39
- SHA1 8114e43152797296ec1919b1c713ebada661ca51
- SHA512 46bf19a71fe2ae4d61084bcf406604e2f375c92f5de1a5e9a6eb857424eb4dc82e70ae7099aa3676c518960f78a17dafa05c23e5283954e43f44190391662ed1
- SSDEEP 1536:WLWIcTAacVyVg+h1hT9Uh+uQNIIhVQoJadWytgYT+j:4TlCg+h1xr9IIh+oJadrb
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral15 behavioral16
- Target
  $PLUGINSDIR/stack.dll
- Size 10KB
- SHA256 46b4a72ae8590b0afb3304cc5c13db0502bc4c4cb02f64f37c79008c17db814f
- MD5 0f61a81a543822de5fcb9a8a43f230dd
- SHA1 d01d4a0f542f3c654637fdfe5a574fe1f150ece1
- SHA512 596b7a897ba64c32e26ba6168aa3628aad37b187a9814a286298307d8c42eabf8e8a679dbda558f8b2cdc8676c94ec819256432aa5ad7c05a5387759262a4402
- SSDEEP 192:VBEc/BwQV5gTRk6uIu8uQubQuNu3fufuXuPDyuSuFujournu6udkuUuw0y9UrVo:VBEwBZmx97TSefeC/zIqoInvEkJ8y9x
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral17 behavioral18
- Target
  GConverter.exe
- Size 508KB
- SHA256 de44b30d0f6a9c99b3fafc4cfcce5a82e3b9d8ac4b32bf87ecc7233ddad6275d
- MD5 2ef6758c7dd4e90b30e3d4832bd45e0e
- SHA1 814b66b9c98151f9b0867c097c65e56a831f29f5
- SHA512 79460b111150c357dc3c0fc0457b027af30b946aab0d671f35f10d0ee888e51ead9f415170c76fcc1c81336aac481365e1b8055362f51b783fa3444f16d150df
- SSDEEP 3072:o6D3sRGj7s20bK3GNhhCz6JpJqe0CQkzJou7Q/ub7:oi3Rs20ughhs6JLqNCQgJp8/Y7
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral19 behavioral20
- Target
  GToolbar.dll
- Size 100KB
- SHA256 3b01d8afab97431a10403b2e28476096d4ac93398687d6208c5809953da66b23
- MD5 5d3a93b519baf58263671fcb25f23087
- SHA1 2d2b585ee1b26665dc20525a16c0dd2bb625344c
- SHA512 2cbe4772d9ceb06f9d7a079424b4cf7f7634d1ff5773c748bd861be086b45510fe76c02b6904c250fb54aa70a71d55313c0151853708a671b9bf3f1459f4ebed
- SSDEEP 1536:8r3LX2nByyAoDl81RN6T6j3fs0cYX/oAGC1Y9eERR1L:8HmByyVOnfjjX/oANy1RR1
- MD5 SHA1 SHA512 SSDEEP
Score

6^/10

adware stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral21 behavioral22
- Target
  GUpdate.exe
- Size 196KB
- SHA256 de4ba9c67d8859a208c6b98fede21cd6be61073dd2f9d9239761595d7258af9f
- MD5 66a5bd1c4fddfbd195582598080940f3
- SHA1 a52c9ea23d2b76b4475d4bd401a4058781f9f859
- SHA512 b8a856e1ba324e668983bd9b1b4cd9c3f2ea4195c5b00c1c718619021e53cba03bbaeaff086869ad168feb3b624a9f12ac1e91fd61acd5230820a6c10bd61f09
- SSDEEP 768:nfX5c4/QhSMnUNmcL+Q2QzDr9cHSiU3p4rwVdUEc2ZI8DmG94kDvB2pi:nv5f/Q0GmL+4KHSDy6sO94kNIi
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

T1176

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Installs/modifies Browser Helper Object

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24