adc18303d348ca92f343a6b22b4788fbe234b163ee22860e95694afa9aba3316 | Triage

Sharing

General

Target

251632d2a887f2fdfa3f16069a3a315c_JaffaCakes118
Size

98KB
Sample

240704-h41y4aself
MD5

251632d2a887f2fdfa3f16069a3a315c
SHA1

bb7ae2eced0493dccf446bcdfddc36677e90fb62
SHA256

adc18303d348ca92f343a6b22b4788fbe234b163ee22860e95694afa9aba3316
SHA512

fac1df82319afc463c11d21a284df8b16936b1771eed4705b92c78b0585e8b69741175e35cef28f1e0d26ae577a4f3bb0cb958c3d7a51755995d089fc608be4c
SSDEEP

3072:kWeyuJoPOIAXzzEUKnkbnq13DTVennGL2o8xnNrk24y9:V3osXqnqKHo8xnG

Score

8^/10

adware persistence stealer

Malware Config

Targets

- Target
  
  251632d2a887f2fdfa3f16069a3a315c_JaffaCakes118
- Size
  
  98KB
- MD5
  
  251632d2a887f2fdfa3f16069a3a315c
- SHA1
  
  bb7ae2eced0493dccf446bcdfddc36677e90fb62
- SHA256
  
  adc18303d348ca92f343a6b22b4788fbe234b163ee22860e95694afa9aba3316
- SHA512
  
  fac1df82319afc463c11d21a284df8b16936b1771eed4705b92c78b0585e8b69741175e35cef28f1e0d26ae577a4f3bb0cb958c3d7a51755995d089fc608be4c
- SSDEEP
  
  3072:kWeyuJoPOIAXzzEUKnkbnq13DTVennGL2o8xnNrk24y9:V3osXqnqKHo8xnG
Score

8^/10

adware persistence stealer
- Sets service image path in registry
  persistence
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Browser Extensions

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarepersistencestealer

behavioral2

adwarepersistencestealer