Overview

overview

8

Static

static

3

f1960e66d1...18.exe

windows7-x64

f1960e66d1...18.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1960e66d1cae656c23a7ddfc7bf65cb_JaffaCakes118

  • Size

    244KB

  • Sample

    240415-vw981sbh23

  • MD5

    f1960e66d1cae656c23a7ddfc7bf65cb

  • SHA1

    ec664ec29b7193e91af819c17ac75d125c7b4a98

  • SHA256

    d4866148c577d8ae964dedfc88138b7cf03d4ff4179ab381ff150ebe0a782068

  • SHA512

    ea6eb848be33f5fac8b41d357d619bec84bd0d6bb247eb3722ccc52c29a6eb837db19476251a572d1334ce2d1f3277cb4a560d9f396c10e8fa07d94369593c4c

  • SSDEEP

    3072:gwJIef1MQw9ma5f4+4RE45Jk75QjbNdlT9/NQjDM6ii9hgb6ru87fJ9JQvVuOG1P:gLQxE45Jk75ovT9/SDkC1yNg

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      f1960e66d1cae656c23a7ddfc7bf65cb_JaffaCakes118

    • Size

      244KB

    • MD5

      f1960e66d1cae656c23a7ddfc7bf65cb

    • SHA1

      ec664ec29b7193e91af819c17ac75d125c7b4a98

    • SHA256

      d4866148c577d8ae964dedfc88138b7cf03d4ff4179ab381ff150ebe0a782068

    • SHA512

      ea6eb848be33f5fac8b41d357d619bec84bd0d6bb247eb3722ccc52c29a6eb837db19476251a572d1334ce2d1f3277cb4a560d9f396c10e8fa07d94369593c4c

    • SSDEEP

      3072:gwJIef1MQw9ma5f4+4RE45Jk75QjbNdlT9/NQjDM6ii9hgb6ru87fJ9JQvVuOG1P:gLQxE45Jk75ovT9/SDkC1yNg

    Score
    8/10
    adwarepersistencestealer

    • Sets DLL path for service in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks