6a90c1703ad1faef8304c6473b11cfa88f120ad80305009997fc7f47f92e2d8d | Triage

Sharing

General

Target

3eb1dc0541af0076079f94998a216068_JaffaCakes118
Size

128KB
Sample

240712-ysn36ayakl
MD5

3eb1dc0541af0076079f94998a216068
SHA1

e3bbf972069948c67b50678a1f7fdb55752804b9
SHA256

6a90c1703ad1faef8304c6473b11cfa88f120ad80305009997fc7f47f92e2d8d
SHA512

8280a4570117f803cb8a1230add347c653e98d255e06a0f0bc8ce9daccc460390bd0b493bfb76fb1c3af18d92cbea4fecd2831b857b97a52b8438d25e3920f6f
SSDEEP

3072:EmeDmBqskJAhEJyV5afnwx74QjAbX22oXhL1luokA6ya879MJBj9TA:E8ppe3X22oxJ28i5TA

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  3eb1dc0541af0076079f94998a216068_JaffaCakes118
- Size
  
  128KB
- MD5
  
  3eb1dc0541af0076079f94998a216068
- SHA1
  
  e3bbf972069948c67b50678a1f7fdb55752804b9
- SHA256
  
  6a90c1703ad1faef8304c6473b11cfa88f120ad80305009997fc7f47f92e2d8d
- SHA512
  
  8280a4570117f803cb8a1230add347c653e98d255e06a0f0bc8ce9daccc460390bd0b493bfb76fb1c3af18d92cbea4fecd2831b857b97a52b8438d25e3920f6f
- SSDEEP
  
  3072:EmeDmBqskJAhEJyV5afnwx74QjAbX22oXhL1luokA6ya879MJBj9TA:E8ppe3X22oxJ28i5TA
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer