Overview

overview

8

Static

static

3

763faa83f4...18.exe

windows7-x64

8

763faa83f4...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    763faa83f40257c193f073bd54b0f5de_JaffaCakes118

  • Size

    251KB

  • Sample

    240726-3st2mawbla

  • MD5

    763faa83f40257c193f073bd54b0f5de

  • SHA1

    a6769a66b377ca7791303bc880a260284b93aa87

  • SHA256

    1e9b1b15ecfec97676fb34d812eaecd96816dacba7faec43442b1324a670486e

  • SHA512

    8aecbce34ea1818ee7d7f808cf0be573a796284728da868ee67e6f9f0b17e4ae018eedf5ebb55375889e372e39fa4dd48893ecd60e88a685bda72ebeea379c94

  • SSDEEP

    3072:ZFF++3/4VEav0dEixtdrze+rsXSyLoz2B4iS06RA6o6jlKZwoOkWUEvRouccMU4d:ZiogVEavixTDy1h8Rm4l9hkW5RouRm

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      763faa83f40257c193f073bd54b0f5de_JaffaCakes118

    • Size

      251KB

    • MD5

      763faa83f40257c193f073bd54b0f5de

    • SHA1

      a6769a66b377ca7791303bc880a260284b93aa87

    • SHA256

      1e9b1b15ecfec97676fb34d812eaecd96816dacba7faec43442b1324a670486e

    • SHA512

      8aecbce34ea1818ee7d7f808cf0be573a796284728da868ee67e6f9f0b17e4ae018eedf5ebb55375889e372e39fa4dd48893ecd60e88a685bda72ebeea379c94

    • SSDEEP

      3072:ZFF++3/4VEav0dEixtdrze+rsXSyLoz2B4iS06RA6o6jlKZwoOkWUEvRouccMU4d:ZiogVEavixTDy1h8Rm4l9hkW5RouRm

    Score
    8/10
    adwarediscoverypersistencestealer

    • Event Triggered Execution: Image File Execution Options Injection

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks