cc543ec64ba4960631d25b31f67b0d21107b1f03ee84829f1db2c50489391d69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cbbd610eff2548d3b5e3d4d3b8a7bd5_JaffaCakes118
Size

94KB
Sample

240708-r3mjratfln
MD5

2cbbd610eff2548d3b5e3d4d3b8a7bd5
SHA1

4c8f47a46f2e794bcd3d11b08bf2964f871dcc5a
SHA256

cc543ec64ba4960631d25b31f67b0d21107b1f03ee84829f1db2c50489391d69
SHA512

bb6663ba5f468404ff214babb01b19d03ab36e9fa00bb485966475b2e41b8b7646e498b14dcd77881ea2b5f18827d5f6f4868cc31bdc4268581b017fbc03da79
SSDEEP

1536:0v7hZSF84TL6fbVmIko13tkbJbkpCHnJsHtnw5LLLnKDiDPs2p8RT94Xu5x8KQMm:w9ZSFJGfbRF13tkbJMCHJsHtI/nK6s7s

Score

7^/10

adware stealer

Malware Config

Targets

- Target
  
  2cbbd610eff2548d3b5e3d4d3b8a7bd5_JaffaCakes118
- Size
  
  94KB
- MD5
  
  2cbbd610eff2548d3b5e3d4d3b8a7bd5
- SHA1
  
  4c8f47a46f2e794bcd3d11b08bf2964f871dcc5a
- SHA256
  
  cc543ec64ba4960631d25b31f67b0d21107b1f03ee84829f1db2c50489391d69
- SHA512
  
  bb6663ba5f468404ff214babb01b19d03ab36e9fa00bb485966475b2e41b8b7646e498b14dcd77881ea2b5f18827d5f6f4868cc31bdc4268581b017fbc03da79
- SSDEEP
  
  1536:0v7hZSF84TL6fbVmIko13tkbJbkpCHnJsHtnw5LLLnKDiDPs2p8RT94Xu5x8KQMm:w9ZSFJGfbRF13tkbJMCHJsHtI/nK6s7s
Score

7^/10

adware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2