Overview

overview

8

Static

static

7

5f5af75e90...18.exe

windows7-x64

8

5f5af75e90...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f5af75e90daed44179d7c7c0ba78ca2_JaffaCakes118

  • Size

    19KB

  • Sample

    240720-g32nkazdqq

  • MD5

    5f5af75e90daed44179d7c7c0ba78ca2

  • SHA1

    0dfc0449ec2fceabddf6b61fb1c7fe8028adc73d

  • SHA256

    34ecd00527928571ec1fa719ed41d3b6ac45a8f4d7450d888002b5a02a73725d

  • SHA512

    3d180d73b54420690aea1e90729f38640e3690e8afb6cf609ba30c91c2be0e8f8cc0d34efaccd1411ccd9b83f6d6baa97bab53c1a009567f3005166e2b4b06a9

  • SSDEEP

    384:NQvVZ+qNevutLv8Wmwsjp0B/cFI2TeOhGaNJawcudoD7Uy:YZ+qNevAUwLGIjQnnbcuyD7U

Score
8/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      5f5af75e90daed44179d7c7c0ba78ca2_JaffaCakes118

    • Size

      19KB

    • MD5

      5f5af75e90daed44179d7c7c0ba78ca2

    • SHA1

      0dfc0449ec2fceabddf6b61fb1c7fe8028adc73d

    • SHA256

      34ecd00527928571ec1fa719ed41d3b6ac45a8f4d7450d888002b5a02a73725d

    • SHA512

      3d180d73b54420690aea1e90729f38640e3690e8afb6cf609ba30c91c2be0e8f8cc0d34efaccd1411ccd9b83f6d6baa97bab53c1a009567f3005166e2b4b06a9

    • SSDEEP

      384:NQvVZ+qNevutLv8Wmwsjp0B/cFI2TeOhGaNJawcudoD7Uy:YZ+qNevAUwLGIjQnnbcuyD7U

    Score
    8/10
    adwarepersistencestealerupx

    • Adds policy Run key to start application

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks