acad1e7a123a7e89bbbf5324414263e94bc95651c52fccac93be17be1e3fd4cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40e7f539601f6771792327dc81561395_JaffaCakes118
Size

410KB
Sample

240713-j811bswaqf
MD5

40e7f539601f6771792327dc81561395
SHA1

187af537fe3facbb8a923f0b4bad06c9b3e54694
SHA256

acad1e7a123a7e89bbbf5324414263e94bc95651c52fccac93be17be1e3fd4cb
SHA512

b887bf6b07d7dc7d3754f432a82d8d61d465c0be15ec125a4aaf0357a4986633a3033362a835d31ce1a2499949e22618f3c7e1e98d0d48c6c57ff109531fcc55
SSDEEP

12288:yMrCGh3+73/pBESBvaWWJmV4b2Rpbo2wgX2:yH733EY8mVpRp7wgm

Score

7^/10

adware stealer

Malware Config

Targets

- Target
  
  40e7f539601f6771792327dc81561395_JaffaCakes118
- Size
  
  410KB
- MD5
  
  40e7f539601f6771792327dc81561395
- SHA1
  
  187af537fe3facbb8a923f0b4bad06c9b3e54694
- SHA256
  
  acad1e7a123a7e89bbbf5324414263e94bc95651c52fccac93be17be1e3fd4cb
- SHA512
  
  b887bf6b07d7dc7d3754f432a82d8d61d465c0be15ec125a4aaf0357a4986633a3033362a835d31ce1a2499949e22618f3c7e1e98d0d48c6c57ff109531fcc55
- SSDEEP
  
  12288:yMrCGh3+73/pBESBvaWWJmV4b2Rpbo2wgX2:yH733EY8mVpRp7wgm
Score

7^/10

adware stealer
- Loads dropped DLL
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2