Overview

overview

8

Static

static

3

66d843d7d4...18.exe

windows7-x64

8

66d843d7d4...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    66d843d7d4c98a52f0308c2aa3efe608_JaffaCakes118

  • Size

    34KB

  • Sample

    240723-kfsnxsxenr

  • MD5

    66d843d7d4c98a52f0308c2aa3efe608

  • SHA1

    fd549386d212dabb5bcd3e782f0d77cb4c5a0c09

  • SHA256

    1c8dea8301973455b2388956fc0b69c053c71900b32b39cf4e00b548b09ff03d

  • SHA512

    fd2413ed7fd335fab72c6907006ecaf9adbe76a30abeadf7cfc98fb409815eb6780fe636718503092bbab0c502dba00ebe54e78de490fca00dd89ace5cab7dc9

  • SSDEEP

    384:cwkSisoEecVjGuDPLBpdWWbiEnKGiVhFYldKug1lqt6U6s1Pa1jMymXWlu+UP:cYidFcJGuzoWbVZiVhFYqugj86hAS/1

Score
8/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      66d843d7d4c98a52f0308c2aa3efe608_JaffaCakes118

    • Size

      34KB

    • MD5

      66d843d7d4c98a52f0308c2aa3efe608

    • SHA1

      fd549386d212dabb5bcd3e782f0d77cb4c5a0c09

    • SHA256

      1c8dea8301973455b2388956fc0b69c053c71900b32b39cf4e00b548b09ff03d

    • SHA512

      fd2413ed7fd335fab72c6907006ecaf9adbe76a30abeadf7cfc98fb409815eb6780fe636718503092bbab0c502dba00ebe54e78de490fca00dd89ace5cab7dc9

    • SSDEEP

      384:cwkSisoEecVjGuDPLBpdWWbiEnKGiVhFYldKug1lqt6U6s1Pa1jMymXWlu+UP:cYidFcJGuzoWbVZiVhFYqugj86hAS/1

    Score
    8/10
    adwarepersistencestealerupx

    • Adds policy Run key to start application

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks