29d7bcce549e42be131c7c3d39a46fe884925ceb742dc8cc1da7f6cae804f4cb

Sharing

Copy URL Twitter E-mail

General

Target
09cf08a8763752fc1fef65105d0b4ed7_JaffaCakes118
Size 3.7MB
Sample240620-2dgmbazfqa
SHA256 29d7bcce549e42be131c7c3d39a46fe884925ceb742dc8cc1da7f6cae804f4cb
MD5 09cf08a8763752fc1fef65105d0b4ed7
SHA1 4eec2eda07b08e150fe53c02c160c8c6e91f487a
SHA512 c67a5a144dc7d0c0b37f932f60b6ac715c1b9f46f7bd3c1a20942281881b0616164631668bf4f642930b56adb308ff5e4cd6caff0359c90cd85e85983613b64d
SSDEEP 98304:8s/47Xh1GSSksDKNVpBXTg5XDz/v+YlQCqe:F4lQSSk3VpRTgVDz/vN
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

adware stealer

Malware Config

Targets

- Target
  09cf08a8763752fc1fef65105d0b4ed7_JaffaCakes118
- Size 3.7MB
- SHA256 29d7bcce549e42be131c7c3d39a46fe884925ceb742dc8cc1da7f6cae804f4cb
- MD5 09cf08a8763752fc1fef65105d0b4ed7
- SHA1 4eec2eda07b08e150fe53c02c160c8c6e91f487a
- SHA512 c67a5a144dc7d0c0b37f932f60b6ac715c1b9f46f7bd3c1a20942281881b0616164631668bf4f642930b56adb308ff5e4cd6caff0359c90cd85e85983613b64d
- SSDEEP 98304:8s/47Xh1GSSksDKNVpBXTg5XDz/v+YlQCqe:F4lQSSk3VpRTgVDz/vN
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  $SYSDIR/Jennie_Finch_Screensaver.scr
- Size 3.6MB
- SHA256 98c8f946a121c5dd0743d43f8e286b0883f5e562b7120ade24b3b3603d01ab75
- MD5 6a4d0b2d75851d844e1faad2a0e4ee69
- SHA1 70ff2cd4ce4f56e03a4b1e1fd3903723fe47cbb2
- SHA512 14434eb350245f00b87ad67dd23176a65d207274b634e80032b0ec2eef4acc8d7589e525f469d6cbc47f138803f4d5b495f3ad439d43a2ca5d4ca2ff0e7640f1
- SSDEEP 98304:H+zn2M6MkLClncZx9aq0btXtGg+p2sWuJ:In25l2lox9apXUg+EPuJ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3 behavioral4
- Target
  $TEMP/dospop.exe
- Size 437KB
- SHA256 9240b45f226db49da56c7b12b7a347eaee578cfc0e4603019091a1fd81bfcafb
- MD5 b2347a5c2350b6342cdabda956618759
- SHA1 f6a779efafcf4bd6a9e1f8bf2c66af33f140622e
- SHA512 76468bda8a4e0df0bf49efdf6cf96d3f45a85db73540e066cc156ca0481d676606d46f3b98774395914c4f357d752c9bbae6e41f9277bc362dd712bd430eda04
- SSDEEP 12288:WGeC/oEjVcYKKrh/RfKum6YGBzz9QJWCqoRFf:8CNjVcNKrnVm6vBzBCqoH
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

adware stealer
- Loads dropped DLL
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral5 behavioral6
- Target
  /tbu03344/RSSReader_plugin.dll
- Size 260KB
- SHA256 efb9b1707ca2447c63036b1074c402f8ff6a5f30441c03ea372d1f0ec8423bc5
- MD5 131fa8aaa9f5e717477d6e16c6f8fb70
- SHA1 17e50467e224d7461c46a456442f10a0da3cc7ec
- SHA512 d87a6789aec7574c4888e4a6da3c7776e937b62ab481e2aa874752d71854b32a9ad2814321cb24da1f1b134e3b443be4474fbfb09335e06349862151beccd32e
- SSDEEP 3072:OoqSEB35vhDI5+crn7CAjtjJ0voNZmDlny+sSy2EjJqP8InGnhIkIoRQc5ciab/W:dEB3QrCgOvSmD1TBEleGOkPWe
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral7 behavioral8
- Target
  /tbu03344/content.tmpl
- Size 304B
- SHA256 d069903c72eb22e8b2a3b581e579796df3750e902d2428ed4cb39882891a0d1a
- MD5 80ba40bb56e55f81154073497011785e
- SHA1 b3c465dd09afed93e7a7ef6473a329f4c0ca2ccf
- SHA512 f6fbc20ce71a66837b4aa33e5c7af0ade8229290efcb3a2d4e8fd3680de7a3ee33312baffda9de62906f40bce6386c7e148ec0e572fcf5f1a8489b0ebb31b6c5
- MD5 SHA1 SHA512
Score

1^/10
behavioral10 behavioral9
- Target
  /tbu03344/dospop.dll
- Size 872KB
- SHA256 7e333107d1b5d943b9ad2a52625b02d28d79be60734e2d77a8ed2c7335214632
- MD5 c97179ba4ed0491d227335ffebdc856a
- SHA1 6de5da7bf23ec5e519a9068817cd26890c1a8930
- SHA512 bc2eb7c9c939907e7390530722b722aefc7e59a06d59187d9cbb9b9678d2209f484d53b0e3c22337026c4ae6b8c619a53ccd0505612f5ab6b456ec204a4b2265
- SSDEEP 12288:JbJRJfYLE7U0n/y2xVlZcuKFAejQD48mCJon71dEMcSbLn3BghuL2OT31YzsPzXh:JVRJfCEw0nq2xVtKFApY5v3+19e
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral11 behavioral12
- Target
  /tbu03344/marquee.tmpl
- Size 1KB
- SHA256 5dd15a2ba1b7b646b1ca35e13ea9ae6c5f3fd5ccfa0480c0070a9b9bf59d477a
- MD5 1cb103dabfc25402a01957b9eb04f948
- SHA1 da250b475bfb386b1741805bda18fbe6e1ae9282
- SHA512 66441e7796cb87eba88aa2b9493f8dea5371dbe045a5f4bfd45a4d9922fab9e0f5277819c0d11d7d561389c75edb1f9b9002439829a13406b92f46fbfd85d2f7
- MD5 SHA1 SHA512
Score

1^/10
behavioral13 behavioral14
- Target
  /tbu03344/options.html
- Size 6KB
- SHA256 29e525a91d8ac4ec6bb2fa299a404d9f151b45400c7cab09675a23469373435b
- MD5 adc6e16ce6e97bd1eb19d3a8dad7274f
- SHA1 12b55eab3225b2250ba051803f7d791db59a46a1
- SHA512 2c4bc233ae8741fe0a6995845aa88d707b347cfc78745fefac346ce27ddd5b799dd374bbba15516f6e61348f52720be3639cf0cd925a599250a9947a33ab7103
- SSDEEP 96:BKQ/O9mOdYCQiLFyzNYs90Yi67mX9gPui39bnLNza7/OBgx4wTn:BFj1cFUYJYnV6Bm8
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral15 behavioral16
- Target
  /tbu03344/static_img.html
- Size 503B
- SHA256 e94503ad0ea2a4f7002ba70f57e12da9daabb5037b6bedc7725d1fc43a487415
- MD5 2caff3519f5be538757c467d4fec4756
- SHA1 7e77344f049d9ee4d216b6f412c01ba28596773c
- SHA512 029814dd117053d03acc6c0cb1af2802256149c6a3588cd41334deeffad6095dc16386887e2053f288b13a5ebd3599cbf9c55c194fde81f3df77045d2609a467
- MD5 SHA1 SHA512
Score

1^/10
behavioral17 behavioral18
- Target
  /tbu03344/static_pub.html
- Size 599B
- SHA256 29101ddb9fc880b921c78a8aa0952310ccf0fe4eb03479425500fc2e779d4b2b
- MD5 0bf3de7de6f6a9ece7674fb245c7e428
- SHA1 a71d601820676d5741734e825c7347d59570bc98
- SHA512 30dc0cf67d772a79dec244882f24c4a6ad71a3139b1b92d6e059f1e677ef138596e71c7bf12c2283b591ad64744b9abd15895fa29c4a600f64c784423bc270b2
- MD5 SHA1 SHA512
Score

1^/10
behavioral19 behavioral20
- Target
  /tbu03344/tbhelper.dll
- Size 180KB
- SHA256 3f56aa185c36a69557a87633def1b291bc7e61064e4ee51483e7b6a2659bb51c
- MD5 bd60d9ff3cfc8ce202063f75eb817780
- SHA1 27f7e3d852ca84223f2a4b48a5a6f8fbca11dfbf
- SHA512 2946d94e697d02c6d25e9daa7b7f18430a6ba597f9f0ce082296b57e28821d2199aab92ed14c58a95a2fa80824c800ab968fc88797d0f0cf1839befb04518155
- SSDEEP 3072:063enkjfM0238ENyc0eePgN8MsSBTwMifOZUv+2jFoArAMsJg:0BiE02HePgCfswMiWZyl0Jg
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral21 behavioral22
- Target
  Uninstall.exe
- Size 49KB
- SHA256 dfffd4857f5c4978b3f982309a6ee87839a62a17775261833af91f5fce9a1cb0
- MD5 91b4ed32fb67509e715ab80fd3714eaf
- SHA1 dbd27ab84a23dea5dcf1ae6d363e2336c0579d75
- SHA512 5753d0d1524f84c7605b6c5a30296bf39a33055304d88acf619ecfd8f379f6753db9931deba0a7543c0aa35c5779e04e3ef53506f437757c904de9021dc18feb
- SSDEEP 768:LbGBkj++ARXzxc2FdZ6IOw7UkfSy0D3DwdFkqsWkJd+eJRn5Am6kRRJ2iZ3igvu:/EkjY1zy214Qay0DGkJYqAELVigvu
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral23 behavioral24

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

T1176

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Installs/modifies Browser Helper Object

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24