55511597e5b014918a3ee7be5d4e1441af2fbe098b9fbfb119bb87d2c4bd5258 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23cb553ce604959f3d39575813d8d48b_JaffaCakes118
Size

650KB
Sample

240703-27fxwa1djq
MD5

23cb553ce604959f3d39575813d8d48b
SHA1

5b8bd0e4cb5f268844c25321b24b51b1b31e58d6
SHA256

55511597e5b014918a3ee7be5d4e1441af2fbe098b9fbfb119bb87d2c4bd5258
SHA512

2e41e305b3ee1a945cc234799582619015778ed140de5ccf3d2e44dc7c7fe93ccf13f854d7d47aa0f98871de6738e57b9bd65bc347ae740c53234e1c5121ec6e
SSDEEP

12288:59m7jyY2XQJ6BwMiovJuI3nrfFyOdyjvTBT97HmoiqtFolf+g6Y3Va:uuLOFLovZ3nrMIULBTpHliqtm3

Score

10^/10

adware evasion persistence stealer

Malware Config

Targets

- Target
  
  23cb553ce604959f3d39575813d8d48b_JaffaCakes118
- Size
  
  650KB
- MD5
  
  23cb553ce604959f3d39575813d8d48b
- SHA1
  
  5b8bd0e4cb5f268844c25321b24b51b1b31e58d6
- SHA256
  
  55511597e5b014918a3ee7be5d4e1441af2fbe098b9fbfb119bb87d2c4bd5258
- SHA512
  
  2e41e305b3ee1a945cc234799582619015778ed140de5ccf3d2e44dc7c7fe93ccf13f854d7d47aa0f98871de6738e57b9bd65bc347ae740c53234e1c5121ec6e
- SSDEEP
  
  12288:59m7jyY2XQJ6BwMiovJuI3nrfFyOdyjvTBT97HmoiqtFolf+g6Y3Va:uuLOFLovZ3nrMIULBTpHliqtm3
Score

10^/10

adware evasion persistence stealer
- Modifies firewall policy service
  evasion
- Adds Run key to start application
  persistence
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Browser Extensions

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

adwareevasionpersistencestealer