84d305b7dcb21654c719716553c9c2b1b34a749364d79c6c2d141f210769e8af | Triage

Sharing

General

Target

5e7462c5d257c4f4634c913e49c9d223_JaffaCakes118
Size

128KB
Sample

240720-bjy6fazbpn
MD5

5e7462c5d257c4f4634c913e49c9d223
SHA1

aea9ea295a9fb87e7c048cb1e692ef962de51479
SHA256

84d305b7dcb21654c719716553c9c2b1b34a749364d79c6c2d141f210769e8af
SHA512

9c493ff214b66daf418aa5142fde56c5325d5b10584b3b20bc75dba1103ece8a39ac8e480a4ccdfe9866bc56ebe94c45601def50b894a844cafa4561681d657f
SSDEEP

3072:EmeDmBqskJJqeInajbONjhRNetwDFoUtM0auaYUdD:E8MsajbojhOGJoQIPYUdD

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  5e7462c5d257c4f4634c913e49c9d223_JaffaCakes118
- Size
  
  128KB
- MD5
  
  5e7462c5d257c4f4634c913e49c9d223
- SHA1
  
  aea9ea295a9fb87e7c048cb1e692ef962de51479
- SHA256
  
  84d305b7dcb21654c719716553c9c2b1b34a749364d79c6c2d141f210769e8af
- SHA512
  
  9c493ff214b66daf418aa5142fde56c5325d5b10584b3b20bc75dba1103ece8a39ac8e480a4ccdfe9866bc56ebe94c45601def50b894a844cafa4561681d657f
- SSDEEP
  
  3072:EmeDmBqskJJqeInajbONjhRNetwDFoUtM0auaYUdD:E8MsajbojhOGJoQIPYUdD
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer