Overview

overview

8

Static

static

3

38ab5a1876...18.dll

windows7-x64

1

38ab5a1876...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38ab5a187648ca74cf8b0d36df4f1e74_JaffaCakes118

  • Size

    131KB

  • Sample

    240711-l2sfqatgrf

  • MD5

    38ab5a187648ca74cf8b0d36df4f1e74

  • SHA1

    4c5049c109f3b2f05578cdc3e9082664c831a973

  • SHA256

    0e5c9178c0c705e8cefe13b6a8fe37ee5c8ef76b643c5535220ea0ac381c754a

  • SHA512

    f1425e61ee6a41da8cf3e21c89ec5adc2287caf69e2401494b3e18ce9051ee24419039b80b8e1769dc1c538624155f1f1f8175ade1a55610bca1c9d358a11a0d

  • SSDEEP

    3072:f+XFZx63+eOcvjbXBifdTtuyOyO/QuAvtWpo61IML:f+IPjjLMVTtgp4XtW

Score
8/10
adwarepersistenceprivilege_escalationstealer

Malware Config

Targets

    • Target

      38ab5a187648ca74cf8b0d36df4f1e74_JaffaCakes118

    • Size

      131KB

    • MD5

      38ab5a187648ca74cf8b0d36df4f1e74

    • SHA1

      4c5049c109f3b2f05578cdc3e9082664c831a973

    • SHA256

      0e5c9178c0c705e8cefe13b6a8fe37ee5c8ef76b643c5535220ea0ac381c754a

    • SHA512

      f1425e61ee6a41da8cf3e21c89ec5adc2287caf69e2401494b3e18ce9051ee24419039b80b8e1769dc1c538624155f1f1f8175ade1a55610bca1c9d358a11a0d

    • SSDEEP

      3072:f+XFZx63+eOcvjbXBifdTtuyOyO/QuAvtWpo61IML:f+IPjjLMVTtgp4XtW

    Score
    8/10
    adwarepersistenceprivilege_escalationstealer

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks