Overview

overview

8

Static

static

3

ffc17c873d...18.exe

windows7-x64

8

ffc17c873d...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ffc17c873d6f048e75ce6a7f6e0e85fa_JaffaCakes118

  • Size

    544KB

  • Sample

    240421-vlaqeaga5v

  • MD5

    ffc17c873d6f048e75ce6a7f6e0e85fa

  • SHA1

    42f466a1618251ca765db4a6d383d7dc11bf9e62

  • SHA256

    c6401d358e6f779598a449c953f7da5c07fd7f474c8989c82e90c8e20088b65e

  • SHA512

    8cb5ac6cfc017d017f0714eb725392c2158678a239d3bd6d05c28cec9d54c5f43d52cbdb91bb91f39e9cc3bd756c16e86d5b0645aa358bd1dc581d086bcacc31

  • SSDEEP

    12288:R43dzxDm9dUQ6E8ZBYzCRShBCzh6YF4rLQ+5hc1F5dJ:R435xDCz6E8MGRSvOh6YF4r0+Gv

Score
8/10
adwarebootkitpersistencestealer

Malware Config

Targets

    • Target

      ffc17c873d6f048e75ce6a7f6e0e85fa_JaffaCakes118

    • Size

      544KB

    • MD5

      ffc17c873d6f048e75ce6a7f6e0e85fa

    • SHA1

      42f466a1618251ca765db4a6d383d7dc11bf9e62

    • SHA256

      c6401d358e6f779598a449c953f7da5c07fd7f474c8989c82e90c8e20088b65e

    • SHA512

      8cb5ac6cfc017d017f0714eb725392c2158678a239d3bd6d05c28cec9d54c5f43d52cbdb91bb91f39e9cc3bd756c16e86d5b0645aa358bd1dc581d086bcacc31

    • SSDEEP

      12288:R43dzxDm9dUQ6E8ZBYzCRShBCzh6YF4rLQ+5hc1F5dJ:R435xDCz6E8MGRSvOh6YF4r0+Gv

    Score
    8/10
    adwarebootkitpersistencestealer

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks