Overview

overview

8

Static

static

3

5a4ac31453...18.exe

windows7-x64

8

5a4ac31453...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a4ac31453f9c83c82ae5d7ed1e2d6b2_JaffaCakes118

  • Size

    468KB

  • Sample

    240719-d1z56s1akn

  • MD5

    5a4ac31453f9c83c82ae5d7ed1e2d6b2

  • SHA1

    26fc48d4adf0761894aa8d7d4fb59c84a62e3133

  • SHA256

    2d46fe98c5a3e8351983c895b8a9ce15364a9ed872cd11cef0fc839ab1914763

  • SHA512

    474be6c2644061fe41794598b9719d024178b9a094fb29c016a1f907ccec800950d9b4379b776f070e9b3c521d615f79fc64fc440a7f3b8cca42a6955ff3dd12

  • SSDEEP

    12288:B/3KBaDVuotwC559JYz4aysshaGpPpFOEh1Xpr3IXGTTJEdI:B/3EaDVrwC55gfxsZP+EhFt3IXJi

Score
8/10
adwarebootkitpersistencestealer

Malware Config

Targets

    • Target

      5a4ac31453f9c83c82ae5d7ed1e2d6b2_JaffaCakes118

    • Size

      468KB

    • MD5

      5a4ac31453f9c83c82ae5d7ed1e2d6b2

    • SHA1

      26fc48d4adf0761894aa8d7d4fb59c84a62e3133

    • SHA256

      2d46fe98c5a3e8351983c895b8a9ce15364a9ed872cd11cef0fc839ab1914763

    • SHA512

      474be6c2644061fe41794598b9719d024178b9a094fb29c016a1f907ccec800950d9b4379b776f070e9b3c521d615f79fc64fc440a7f3b8cca42a6955ff3dd12

    • SSDEEP

      12288:B/3KBaDVuotwC559JYz4aysshaGpPpFOEh1Xpr3IXGTTJEdI:B/3EaDVrwC55gfxsZP+EhFt3IXJi

    Score
    8/10
    adwarebootkitpersistencestealer

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks