09965aff7cddcc6f9080373285313a193f95071f07ab24d0ed37b5c612cb9442 | Triage

Sharing

General

Target

8e02962c52bc21cc69e159f7c76e9e19_JaffaCakes118
Size

154KB
Sample

240812-kan4jsxcng
MD5

8e02962c52bc21cc69e159f7c76e9e19
SHA1

9764effeb71c8d3531bbd0f24d18153eee15c598
SHA256

09965aff7cddcc6f9080373285313a193f95071f07ab24d0ed37b5c612cb9442
SHA512

f9d01a945c2283a5748d221afe478f0a190aa96eb845853ebae1b673919fa2820563017f800e624031d8a5a1a208e2300a007c440fe15d64c4dcb5ba4dc11915
SSDEEP

3072:OrSU1ur05E1x26Lsmw5FJN9dLovZP5FZxL9U2ZajJOeItGdxd3ExMx:OrVE1x2L95FJN30vZPtZajUxIbd0x

Score

10^/10

adware discovery evasion stealer trojan upx

Malware Config

Targets

- Target
  
  8e02962c52bc21cc69e159f7c76e9e19_JaffaCakes118
- Size
  
  154KB
- MD5
  
  8e02962c52bc21cc69e159f7c76e9e19
- SHA1
  
  9764effeb71c8d3531bbd0f24d18153eee15c598
- SHA256
  
  09965aff7cddcc6f9080373285313a193f95071f07ab24d0ed37b5c612cb9442
- SHA512
  
  f9d01a945c2283a5748d221afe478f0a190aa96eb845853ebae1b673919fa2820563017f800e624031d8a5a1a208e2300a007c440fe15d64c4dcb5ba4dc11915
- SSDEEP
  
  3072:OrSU1ur05E1x26Lsmw5FJN9dLovZP5FZxL9U2ZajJOeItGdxd3ExMx:OrVE1x2L95FJN30vZPtZajUxIbd0x
Score

10^/10

adware discovery evasion stealer trojan upx
- UAC bypass
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks whether UAC is enabled
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryevasionstealertrojanupx

behavioral2

adwarediscoveryevasionstealertrojanupx