Overview

overview

7

Static

static

3

3d9a4d1b25...18.exe

windows7-x64

7

3d9a4d1b25...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d9a4d1b25acdefc04744243e6d8d5c0_JaffaCakes118

  • Size

    313KB

  • Sample

    240712-qynetawbkp

  • MD5

    3d9a4d1b25acdefc04744243e6d8d5c0

  • SHA1

    55352f74645e8738af6f68b6fdbb63be2a276986

  • SHA256

    5f9c07e8b51bafdf63ea71997f5d485dc9061b5bbb7597d4a3e5f7a1863d2ae1

  • SHA512

    04162c5a6d45423294f281659f85fda7063e16e226ff7a9157cf9717e01b629b7a5c176ccbba95016e18f33b3d134696763dfbf2e60ad777a463de1e1fb3af65

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4syhV0KtBqM1JzGMJ/5gXk18puB8HuYdEPLF:91OgLda7z+Mr1JBgbBLMJ

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      3d9a4d1b25acdefc04744243e6d8d5c0_JaffaCakes118

    • Size

      313KB

    • MD5

      3d9a4d1b25acdefc04744243e6d8d5c0

    • SHA1

      55352f74645e8738af6f68b6fdbb63be2a276986

    • SHA256

      5f9c07e8b51bafdf63ea71997f5d485dc9061b5bbb7597d4a3e5f7a1863d2ae1

    • SHA512

      04162c5a6d45423294f281659f85fda7063e16e226ff7a9157cf9717e01b629b7a5c176ccbba95016e18f33b3d134696763dfbf2e60ad777a463de1e1fb3af65

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4syhV0KtBqM1JzGMJ/5gXk18puB8HuYdEPLF:91OgLda7z+Mr1JBgbBLMJ

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks