cfc4b5433d74f4d99db3ed7bc9a15fad05292df9ba3343564f7a7a07cc4339b2 | Triage

Sharing

General

Target

8b6f14f32594ae4f9b197dc9fb30c792_JaffaCakes118
Size

94KB
Sample

240811-wtcemsvgqb
MD5

8b6f14f32594ae4f9b197dc9fb30c792
SHA1

fa12b61f6f4ced384bebde6e4ab55eeca7906ce8
SHA256

cfc4b5433d74f4d99db3ed7bc9a15fad05292df9ba3343564f7a7a07cc4339b2
SHA512

6d89ab18b63952c9b8d4cbfba637ac7938b193f6a7a6c680c0866c6afac1e9f87d3cf4f823dd1c8df2d9b0fbf1a00463b20685ed9de89d4c84893afe78eb731b
SSDEEP

1536:MxPbpg78UlIlvBvjvQvmaI49tkLSMIRa29EJyoWRUym2gVTzx1826qsk/V19oCQS:OPDvBvjvQvmN8tPMIA29Esn96NiL+V11

Score

7^/10

adware defense_evasion discovery stealer

Malware Config

Targets

- Target
  
  8b6f14f32594ae4f9b197dc9fb30c792_JaffaCakes118
- Size
  
  94KB
- MD5
  
  8b6f14f32594ae4f9b197dc9fb30c792
- SHA1
  
  fa12b61f6f4ced384bebde6e4ab55eeca7906ce8
- SHA256
  
  cfc4b5433d74f4d99db3ed7bc9a15fad05292df9ba3343564f7a7a07cc4339b2
- SHA512
  
  6d89ab18b63952c9b8d4cbfba637ac7938b193f6a7a6c680c0866c6afac1e9f87d3cf4f823dd1c8df2d9b0fbf1a00463b20685ed9de89d4c84893afe78eb731b
- SSDEEP
  
  1536:MxPbpg78UlIlvBvjvQvmaI49tkLSMIRa29EJyoWRUym2gVTzx1826qsk/V19oCQS:OPDvBvjvQvmN8tPMIA29Esn96NiL+V11
Score

7^/10

discovery adware defense_evasion stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

adwaredefense_evasiondiscoverystealer