Overview

overview

7

Static

static

7

219d0916ad...18.exe

windows7-x64

7

219d0916ad...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    219d0916adff999e13abf180231ad552_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240703-js4raatekb

  • MD5

    219d0916adff999e13abf180231ad552

  • SHA1

    c2bc2c0358acf7ad957a52b1ab4d3a9305f8afe4

  • SHA256

    64c4b96fb483138ace5ac80895bd30d1d95a7e1d526b8a8eb4fe1e2f57bd799a

  • SHA512

    011383435e05883cdf884063ef5805fc7681641ab3e8ef4c192599d2c2210d09ece5c9a0b8777bc3e74177c705c605c36c821fbcce958fcea5c2ccda46aecdda

  • SSDEEP

    12288:Q6t/08n6hkAW2adY8+QGXVfo/j0ofb2s0xmPMVqeAaPcP0bMDChZ4Pu+O6odlkNy:Q6S86badYrfGLzFPMVdAD0YCqO6ob06

Score
7/10
adwarediscoverypersistencestealerupx

Malware Config

Targets

    • Target

      219d0916adff999e13abf180231ad552_JaffaCakes118

    • Size

      1.1MB

    • MD5

      219d0916adff999e13abf180231ad552

    • SHA1

      c2bc2c0358acf7ad957a52b1ab4d3a9305f8afe4

    • SHA256

      64c4b96fb483138ace5ac80895bd30d1d95a7e1d526b8a8eb4fe1e2f57bd799a

    • SHA512

      011383435e05883cdf884063ef5805fc7681641ab3e8ef4c192599d2c2210d09ece5c9a0b8777bc3e74177c705c605c36c821fbcce958fcea5c2ccda46aecdda

    • SSDEEP

      12288:Q6t/08n6hkAW2adY8+QGXVfo/j0ofb2s0xmPMVqeAaPcP0bMDChZ4Pu+O6odlkNy:Q6S86badYrfGLzFPMVdAD0YCqO6ob06

    Score
    7/10
    adwarediscoverypersistencestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks