Overview

overview

7

Static

static

3

35ec81dbda...18.exe

windows7-x64

7

35ec81dbda...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    35ec81dbdac69d1d5392e976404b8375_JaffaCakes118

  • Size

    219KB

  • Sample

    240710-xb4lvawdqd

  • MD5

    35ec81dbdac69d1d5392e976404b8375

  • SHA1

    df2e30895f27038d522499ad74cead3c0add2a07

  • SHA256

    1d3fa2f32f03cca49aff08fcb8fb335a9c1b9cd7b62c2a79f3db5e7cdb18d5b0

  • SHA512

    7873dca113bdce6b3ac316c88d3ded0605b4b85c37bf83bef3fb6cb07620bcfec81ffe6a0b9edd1ae9a330f202306401071b4edba627b70d8d18cd904c620a5a

  • SSDEEP

    3072:F/TnM/pDID20RoHb/zfP6Sa3TbukL648dRbKw0GpW0q2aP0cLC4ey0L5yoXt9RLj:pOIDqvtaDBsRGw0J85y0htqv1S

Score
7/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      35ec81dbdac69d1d5392e976404b8375_JaffaCakes118

    • Size

      219KB

    • MD5

      35ec81dbdac69d1d5392e976404b8375

    • SHA1

      df2e30895f27038d522499ad74cead3c0add2a07

    • SHA256

      1d3fa2f32f03cca49aff08fcb8fb335a9c1b9cd7b62c2a79f3db5e7cdb18d5b0

    • SHA512

      7873dca113bdce6b3ac316c88d3ded0605b4b85c37bf83bef3fb6cb07620bcfec81ffe6a0b9edd1ae9a330f202306401071b4edba627b70d8d18cd904c620a5a

    • SSDEEP

      3072:F/TnM/pDID20RoHb/zfP6Sa3TbukL648dRbKw0GpW0q2aP0cLC4ey0L5yoXt9RLj:pOIDqvtaDBsRGw0J85y0htqv1S

    Score
    7/10
    adwarepersistencestealer

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks