Overview

overview

7

Static

static

3

28cbcf2679...18.exe

windows7-x64

7

28cbcf2679...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    28cbcf2679bcaa1e2a3889ca30b5c9fd_JaffaCakes118

  • Size

    313KB

  • Sample

    240706-trhgrsvaqr

  • MD5

    28cbcf2679bcaa1e2a3889ca30b5c9fd

  • SHA1

    776f5de18f9f199d3ebb8fe7794dcc19072ec00f

  • SHA256

    28b4bb7b5579bf336bb195d75ad44767b2d8b720fbf0017003046dc0ee71c321

  • SHA512

    c92430bca9861bcb25a64ecb93d470b5260f8a679b41e282e495f6c065e948d5f67a2c820e051d723eaddca90bceaac70220a8a0f8425a0e75daa8b0fc4b5b96

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s/aVne87mxCTAkdjvlGmEZ6XPUu6Qhg9RgJ:91OgLdaFNRLTAFDZ6XPyQhg9RgJ

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      28cbcf2679bcaa1e2a3889ca30b5c9fd_JaffaCakes118

    • Size

      313KB

    • MD5

      28cbcf2679bcaa1e2a3889ca30b5c9fd

    • SHA1

      776f5de18f9f199d3ebb8fe7794dcc19072ec00f

    • SHA256

      28b4bb7b5579bf336bb195d75ad44767b2d8b720fbf0017003046dc0ee71c321

    • SHA512

      c92430bca9861bcb25a64ecb93d470b5260f8a679b41e282e495f6c065e948d5f67a2c820e051d723eaddca90bceaac70220a8a0f8425a0e75daa8b0fc4b5b96

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s/aVne87mxCTAkdjvlGmEZ6XPUu6Qhg9RgJ:91OgLdaFNRLTAFDZ6XPyQhg9RgJ

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks