Overview

overview

8

Static

static

3

2565ea395b...18.exe

windows7-x64

8

2565ea395b...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2565ea395b8cbf2cc4286b8c17a56c57_JaffaCakes118

  • Size

    14KB

  • Sample

    240704-k6ak2awdkd

  • MD5

    2565ea395b8cbf2cc4286b8c17a56c57

  • SHA1

    2acda2ff62283d96cf8f257bb73a1a0192fc95f9

  • SHA256

    0f5574c4e531f24211440b66043e0416131fc0852f4e99ae71eb2fa557ff6e7d

  • SHA512

    c243182661c1377d78682de705f9ceb474e1081dcc14a9158deccc4d0c54494ae5fd31c9a1664accb21e5df225b48e900bff9a2c79ad970cd6a643def10808aa

  • SSDEEP

    384:5z2pXlvpqVN7PkmLRqvR5Cf9VBnWIIuz8p2:IBg3ovRyPV8p

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      2565ea395b8cbf2cc4286b8c17a56c57_JaffaCakes118

    • Size

      14KB

    • MD5

      2565ea395b8cbf2cc4286b8c17a56c57

    • SHA1

      2acda2ff62283d96cf8f257bb73a1a0192fc95f9

    • SHA256

      0f5574c4e531f24211440b66043e0416131fc0852f4e99ae71eb2fa557ff6e7d

    • SHA512

      c243182661c1377d78682de705f9ceb474e1081dcc14a9158deccc4d0c54494ae5fd31c9a1664accb21e5df225b48e900bff9a2c79ad970cd6a643def10808aa

    • SSDEEP

      384:5z2pXlvpqVN7PkmLRqvR5Cf9VBnWIIuz8p2:IBg3ovRyPV8p

    Score
    8/10
    adwarepersistencestealer

    • Modifies Shared Task Scheduler registry keys

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks