Overview

overview

8

Static

static

3

f180a4af78...18.exe

windows7-x64

f180a4af78...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f180a4af78bb836a4c3066d71a661b61_JaffaCakes118

  • Size

    244KB

  • Sample

    240415-t4m8saba53

  • MD5

    f180a4af78bb836a4c3066d71a661b61

  • SHA1

    b2143f40f04dd4cfec440e0c16374e42398bc22f

  • SHA256

    818600adaf5273806f91e8cc0ad675ff20404bb19d32aeee04d109c10af02514

  • SHA512

    25020d8baf8a34e50f889e3766be9ef939e7a080a75191a0f39859a0ddb5ddf87eed4d067f5fa6863c50159cf347b0c5d05ad0a62675a2224baba0ebcbb60210

  • SSDEEP

    6144:uyjQpFF0pZ8zFk2tN8zft91zKjL4nRvPZrK+8Mzs8:oM5zmoLg8

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      f180a4af78bb836a4c3066d71a661b61_JaffaCakes118

    • Size

      244KB

    • MD5

      f180a4af78bb836a4c3066d71a661b61

    • SHA1

      b2143f40f04dd4cfec440e0c16374e42398bc22f

    • SHA256

      818600adaf5273806f91e8cc0ad675ff20404bb19d32aeee04d109c10af02514

    • SHA512

      25020d8baf8a34e50f889e3766be9ef939e7a080a75191a0f39859a0ddb5ddf87eed4d067f5fa6863c50159cf347b0c5d05ad0a62675a2224baba0ebcbb60210

    • SSDEEP

      6144:uyjQpFF0pZ8zFk2tN8zft91zKjL4nRvPZrK+8Mzs8:oM5zmoLg8

    Score
    8/10
    adwarepersistencestealer

    • Sets DLL path for service in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks