5551635d23a74325974b3fb2f60bb4f6a3a4be154ac2fe6ce7a9578c05f2a059 | Triage

Resubmissions

28-06-2024 19:58

240628-ypy4ystcql 6

28-06-2024 12:45

240628-pzjmkszerb 6

28-06-2024 06:35

240628-hckg2awblc 6

28-06-2024 06:35

240628-hcfh3sycmm 6

Sharing

General

Target

19229f2bf1cde52ce17523902381afbc_JaffaCakes118
Size

2.3MB
Sample

240628-hckg2awblc
MD5

19229f2bf1cde52ce17523902381afbc
SHA1

ba61d9ddfdefa1e8bb7409e2ea5dfb901cb82521
SHA256

5551635d23a74325974b3fb2f60bb4f6a3a4be154ac2fe6ce7a9578c05f2a059
SHA512

a9fbd234737bbbdbb0e2aa97e7877725cebd255d74abd29ec3c57ce0cbc0aa166ce230b67ef0c70b95809ccdd78b762a1d009cf0296753987698d9e509a263e6
SSDEEP

49152:ht94hFwJ5SK3AGMhJt2bKc4wYRhp26hbKD0QbtoyRt7aF:TqhmvSK3TMhJOKyYRe0QJo4uF

Score

6^/10

adware stealer

Malware Config

Targets

- Target
  
  19229f2bf1cde52ce17523902381afbc_JaffaCakes118
- Size
  
  2.3MB
- MD5
  
  19229f2bf1cde52ce17523902381afbc
- SHA1
  
  ba61d9ddfdefa1e8bb7409e2ea5dfb901cb82521
- SHA256
  
  5551635d23a74325974b3fb2f60bb4f6a3a4be154ac2fe6ce7a9578c05f2a059
- SHA512
  
  a9fbd234737bbbdbb0e2aa97e7877725cebd255d74abd29ec3c57ce0cbc0aa166ce230b67ef0c70b95809ccdd78b762a1d009cf0296753987698d9e509a263e6
- SSDEEP
  
  49152:ht94hFwJ5SK3AGMhJt2bKc4wYRhp26hbKD0QbtoyRt7aF:TqhmvSK3TMhJOKyYRe0QJo4uF
Score

6^/10

adware stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1