Overview

overview

8

Static

static

7

858a11b009...18.exe

windows7-x64

8

858a11b009...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    858a11b0097df26c5721f4d15f997bff_JaffaCakes118

  • Size

    31KB

  • Sample

    240810-k6gdksxfqg

  • MD5

    858a11b0097df26c5721f4d15f997bff

  • SHA1

    71a0a7dc8dbf58ba72eaafbde003140ded893e0b

  • SHA256

    4d1f652eab422d52dfb60a5a8f928f99288d590452359e8494761de2387bc468

  • SHA512

    280a23c3fc1f7bc0e232f3e2f346f8ac651bbe8545051d475b4b0ef1e22d8273318555270e3ab7b37f22deb294c535e29febf1bc13e0a2a8984f599e98ffd9f1

  • SSDEEP

    768:+W5zBCTMjhS3Pxwfnb0/i96+C1PpRBnbcuyD7U:7MTMjhSZwfWi0PhpRBnouy8

Score
8/10
adwarediscoverypersistencestealerupx

Malware Config

Targets

    • Target

      858a11b0097df26c5721f4d15f997bff_JaffaCakes118

    • Size

      31KB

    • MD5

      858a11b0097df26c5721f4d15f997bff

    • SHA1

      71a0a7dc8dbf58ba72eaafbde003140ded893e0b

    • SHA256

      4d1f652eab422d52dfb60a5a8f928f99288d590452359e8494761de2387bc468

    • SHA512

      280a23c3fc1f7bc0e232f3e2f346f8ac651bbe8545051d475b4b0ef1e22d8273318555270e3ab7b37f22deb294c535e29febf1bc13e0a2a8984f599e98ffd9f1

    • SSDEEP

      768:+W5zBCTMjhS3Pxwfnb0/i96+C1PpRBnbcuyD7U:7MTMjhSZwfWi0PhpRBnouy8

    Score
    8/10
    adwarediscoverypersistencestealerupx

    • Adds policy Run key to start application

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks