Overview

overview

7

Static

static

3

61f1e6c358...18.exe

windows7-x64

7

61f1e6c358...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    61f1e6c3581a9497d9569fe091dc0900_JaffaCakes118

  • Size

    313KB

  • Sample

    240721-3xr3ts1dnc

  • MD5

    61f1e6c3581a9497d9569fe091dc0900

  • SHA1

    01b4c9ab2cdacbf602236db29a5707c3cad990c5

  • SHA256

    282e11acf13460c40f7cf480f62d48fe98965edbeabfc424f0d32136941758c2

  • SHA512

    66408310979db9bb02dc70afac5817e8f92a56d60f4484f0aefab00d994363afb5eb1bd3fe5e998e464bd78da0bc0c32013a15dc0e1dc577b6bc34ae79e079df

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sSeyYxNH1ofOWtDxxMhpBqRu3E6+u9t:91OgLda9eyKLo3NxxMlx06bt

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      61f1e6c3581a9497d9569fe091dc0900_JaffaCakes118

    • Size

      313KB

    • MD5

      61f1e6c3581a9497d9569fe091dc0900

    • SHA1

      01b4c9ab2cdacbf602236db29a5707c3cad990c5

    • SHA256

      282e11acf13460c40f7cf480f62d48fe98965edbeabfc424f0d32136941758c2

    • SHA512

      66408310979db9bb02dc70afac5817e8f92a56d60f4484f0aefab00d994363afb5eb1bd3fe5e998e464bd78da0bc0c32013a15dc0e1dc577b6bc34ae79e079df

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sSeyYxNH1ofOWtDxxMhpBqRu3E6+u9t:91OgLda9eyKLo3NxxMlx06bt

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks