Overview

overview

7

Static

static

3

71b2671d48...18.exe

windows7-x64

7

71b2671d48...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    71b2671d482af0494b94af77bb31d289_JaffaCakes118

  • Size

    257KB

  • Sample

    240725-3he5qasarr

  • MD5

    71b2671d482af0494b94af77bb31d289

  • SHA1

    6798cd37eadf55dec0b1f01a4f0d57f670824649

  • SHA256

    fc447b51643bbdbfd9f00165e537ed048888744132cb695717e860c18a667ff8

  • SHA512

    39b0682a2eee07193af9e2e7d618a73b40e369c9555b5c2bad1d0fb6e0d6312ddd7f307392af0eff38df6567063c5d121ec6b5faf79d8c779c6270c9a7bb484f

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sUXGEwYBLXB+fHDSsfSUMCBwO:91OgLdayEwYtXB+fDdcCBwO

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      71b2671d482af0494b94af77bb31d289_JaffaCakes118

    • Size

      257KB

    • MD5

      71b2671d482af0494b94af77bb31d289

    • SHA1

      6798cd37eadf55dec0b1f01a4f0d57f670824649

    • SHA256

      fc447b51643bbdbfd9f00165e537ed048888744132cb695717e860c18a667ff8

    • SHA512

      39b0682a2eee07193af9e2e7d618a73b40e369c9555b5c2bad1d0fb6e0d6312ddd7f307392af0eff38df6567063c5d121ec6b5faf79d8c779c6270c9a7bb484f

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sUXGEwYBLXB+fHDSsfSUMCBwO:91OgLdayEwYtXB+fDdcCBwO

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks