Overview

overview

7

Static

static

3

89d2462d20...18.exe

windows7-x64

7

89d2462d20...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    89d2462d203145c071c26bfa01e09a57_JaffaCakes118

  • Size

    313KB

  • Sample

    240811-lah3zatcnp

  • MD5

    89d2462d203145c071c26bfa01e09a57

  • SHA1

    491185b3f1b6819fd6a1a6d0a6baaa3012618b86

  • SHA256

    f3dad4ff5277e499b9b606b015d6ce9ece8a6bb7c565c9c9196ccc0d79362dcb

  • SHA512

    3d61fd5fb7a8953221955493807949a2d6d85ffd46c92e3f39d092a130e76a35916cf9cc96599da43d212f4aedc12d186fe8b8dcfbec745d4b67aeb36f31f984

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sc7Ffeyx2wmvwGRppShQXOsFop:91OgLdaJ9hJvGRpkCX9mp

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      89d2462d203145c071c26bfa01e09a57_JaffaCakes118

    • Size

      313KB

    • MD5

      89d2462d203145c071c26bfa01e09a57

    • SHA1

      491185b3f1b6819fd6a1a6d0a6baaa3012618b86

    • SHA256

      f3dad4ff5277e499b9b606b015d6ce9ece8a6bb7c565c9c9196ccc0d79362dcb

    • SHA512

      3d61fd5fb7a8953221955493807949a2d6d85ffd46c92e3f39d092a130e76a35916cf9cc96599da43d212f4aedc12d186fe8b8dcfbec745d4b67aeb36f31f984

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sc7Ffeyx2wmvwGRppShQXOsFop:91OgLdaJ9hJvGRpkCX9mp

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks