Overview

overview

7

Static

static

1

9439bca826...18.exe

windows7-x64

7

9439bca826...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    9439bca8267ef8bc38c242e9913bddb3_JaffaCakes118

  • Size

    493KB

  • Sample

    240813-w1d7tayhke

  • MD5

    9439bca8267ef8bc38c242e9913bddb3

  • SHA1

    206f9aac9d6632058c931e542b2e335a581863be

  • SHA256

    3548cd7fcd21fb3b06d63897afb5a3dcbd657fd9cde1b99e3ff8334c58c0a3dc

  • SHA512

    00e66c8de51b6fa05c2ef33b0e636084c69d040b32cd39fadffecf51237807cf187a9ce7ad8f2d7935ce9dd50f07891fe6da3ef59eac1e4ef9bfdd9fb83599fc

  • SSDEEP

    12288:taYWPh1az3BxVSQUmK7ruwAk3Ns+bIMrtl:8ZI3lSpmgrzAAs+bIMrt

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      9439bca8267ef8bc38c242e9913bddb3_JaffaCakes118

    • Size

      493KB

    • MD5

      9439bca8267ef8bc38c242e9913bddb3

    • SHA1

      206f9aac9d6632058c931e542b2e335a581863be

    • SHA256

      3548cd7fcd21fb3b06d63897afb5a3dcbd657fd9cde1b99e3ff8334c58c0a3dc

    • SHA512

      00e66c8de51b6fa05c2ef33b0e636084c69d040b32cd39fadffecf51237807cf187a9ce7ad8f2d7935ce9dd50f07891fe6da3ef59eac1e4ef9bfdd9fb83599fc

    • SSDEEP

      12288:taYWPh1az3BxVSQUmK7ruwAk3Ns+bIMrtl:8ZI3lSpmgrzAAs+bIMrt

    Score
    7/10
    adwarediscoverystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks