Overview

overview

7

Static

static

3

02455eb202...18.exe

windows7-x64

7

02455eb202...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02455eb202490e96ba12d213d1bc8caa_JaffaCakes118

  • Size

    998KB

  • Sample

    240427-dj115shf56

  • MD5

    02455eb202490e96ba12d213d1bc8caa

  • SHA1

    a4154de3f1b636e73367d7cb9ec9b671e4cdd5b4

  • SHA256

    90a2ee1cff7330a31151eb182c99a8b9b1d4aaff77ba7d33f58ce78a9cb89f7a

  • SHA512

    0292b2170933fa2c0c0eff3b6787194d11de9f1a3a0a7bdf00265d95e429de0e09db736137592b42b762588a76a576f381b947b6046b93a13ddf3662bf26e623

  • SSDEEP

    24576:ElcMHEslTdZzMRwOaI1Nv1EW36IzS2NNCOPVbZe5y:E6MrOaI1NSW3fzS2NNCO9bZe5y

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      02455eb202490e96ba12d213d1bc8caa_JaffaCakes118

    • Size

      998KB

    • MD5

      02455eb202490e96ba12d213d1bc8caa

    • SHA1

      a4154de3f1b636e73367d7cb9ec9b671e4cdd5b4

    • SHA256

      90a2ee1cff7330a31151eb182c99a8b9b1d4aaff77ba7d33f58ce78a9cb89f7a

    • SHA512

      0292b2170933fa2c0c0eff3b6787194d11de9f1a3a0a7bdf00265d95e429de0e09db736137592b42b762588a76a576f381b947b6046b93a13ddf3662bf26e623

    • SSDEEP

      24576:ElcMHEslTdZzMRwOaI1Nv1EW36IzS2NNCOPVbZe5y:E6MrOaI1NSW3fzS2NNCO9bZe5y

    Score
    7/10
    adwarediscoverystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks