Overview

overview

7

Static

static

3

4d846d0c65...18.exe

windows7-x64

7

4d846d0c65...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4d846d0c65869606caf30f4629489261_JaffaCakes118

  • Size

    313KB

  • Sample

    240716-j88p6swcnc

  • MD5

    4d846d0c65869606caf30f4629489261

  • SHA1

    7151df270548d00913141e4cc08a22b806501e8f

  • SHA256

    9d64b61f9d4cde15ca006de5312801a781ddf426d818942202a64564e9e5036d

  • SHA512

    5ea15f973fb04d09143b68201aab1a5b1af588a6b62944138a0723436ad131e4c74a5f53fe6bea94e0ea21bfdc3b7502076ec9945a9d8cd01007d8d046054354

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sbMZByUCp3owpKiSTTFxp7CVa9nAVtKRUzxVITr:91OgLda3ZAUCawpKlTTFxRCI1APiWx+n

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      4d846d0c65869606caf30f4629489261_JaffaCakes118

    • Size

      313KB

    • MD5

      4d846d0c65869606caf30f4629489261

    • SHA1

      7151df270548d00913141e4cc08a22b806501e8f

    • SHA256

      9d64b61f9d4cde15ca006de5312801a781ddf426d818942202a64564e9e5036d

    • SHA512

      5ea15f973fb04d09143b68201aab1a5b1af588a6b62944138a0723436ad131e4c74a5f53fe6bea94e0ea21bfdc3b7502076ec9945a9d8cd01007d8d046054354

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sbMZByUCp3owpKiSTTFxp7CVa9nAVtKRUzxVITr:91OgLda3ZAUCawpKlTTFxRCI1APiWx+n

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks