Overview

overview

7

Static

static

1

699a6945b0...18.wsf

windows7-x64

7

699a6945b0...18.wsf

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    699a6945b010e0ec3eafca66c0d790c2_JaffaCakes118

  • Size

    153KB

  • Sample

    240724-a19g3axgpm

  • MD5

    699a6945b010e0ec3eafca66c0d790c2

  • SHA1

    5acadb6821c8b50c003e25d79852a6be318d74e5

  • SHA256

    b4ac901214edfa947e7687a04116e008692299cde1de395a3aced5447e25d3be

  • SHA512

    677d7f176cdf1a90402c653f3996c4074d7b3dae69592da3674785ad5ce8fc9cb7c4c17e80a526aafa9366ab32c2eb0e7b5e05c185943d185ad25494cb7f5567

  • SSDEEP

    1536:Waq2QOZNrWDt4jMpW6KspJFyEg3ubLccvm1VmJ9kSuRryRwYM+wUNQY4JfSH9bnQ:WLs6qjf+wf0Yb7hJPxWk

Score
7/10
adwarepersistenceprivilege_escalationspywarestealer

Malware Config

Targets

    • Target

      699a6945b010e0ec3eafca66c0d790c2_JaffaCakes118

    • Size

      153KB

    • MD5

      699a6945b010e0ec3eafca66c0d790c2

    • SHA1

      5acadb6821c8b50c003e25d79852a6be318d74e5

    • SHA256

      b4ac901214edfa947e7687a04116e008692299cde1de395a3aced5447e25d3be

    • SHA512

      677d7f176cdf1a90402c653f3996c4074d7b3dae69592da3674785ad5ce8fc9cb7c4c17e80a526aafa9366ab32c2eb0e7b5e05c185943d185ad25494cb7f5567

    • SSDEEP

      1536:Waq2QOZNrWDt4jMpW6KspJFyEg3ubLccvm1VmJ9kSuRryRwYM+wUNQY4JfSH9bnQ:WLs6qjf+wf0Yb7hJPxWk

    Score
    7/10
    adwarepersistenceprivilege_escalationspywarestealer

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

      persistenceprivilege_escalation

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks