Overview

overview

7

Static

static

3

a1b3557bfe...18.exe

windows7-x64

7

a1b3557bfe...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1b3557bfe0970dd90bc20a5d93a999d_JaffaCakes118

  • Size

    315KB

  • Sample

    240817-jg9hdsvaqh

  • MD5

    a1b3557bfe0970dd90bc20a5d93a999d

  • SHA1

    7dc85dad3afcb17eed612b266716c6cce36e5227

  • SHA256

    6ba8ce815b5ba3d98cdc4aa5eb85e86ac410dbdef54a02c469f2b5fa73735811

  • SHA512

    d3c7a63ecd056a3cce65af6e096f9f48173750640cdf36ef2bbb401b18caef4070e170090b986b619e76dfd137315984b11b1156b342bd7d3a931bc1e440d09a

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sPBRg9ESOHQjz9Q3zqRCfWERmKLZtH2m:91OgLdaSRqOZOMfWERbLl

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      a1b3557bfe0970dd90bc20a5d93a999d_JaffaCakes118

    • Size

      315KB

    • MD5

      a1b3557bfe0970dd90bc20a5d93a999d

    • SHA1

      7dc85dad3afcb17eed612b266716c6cce36e5227

    • SHA256

      6ba8ce815b5ba3d98cdc4aa5eb85e86ac410dbdef54a02c469f2b5fa73735811

    • SHA512

      d3c7a63ecd056a3cce65af6e096f9f48173750640cdf36ef2bbb401b18caef4070e170090b986b619e76dfd137315984b11b1156b342bd7d3a931bc1e440d09a

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sPBRg9ESOHQjz9Q3zqRCfWERmKLZtH2m:91OgLdaSRqOZOMfWERbLl

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks