Overview

overview

7

Static

static

3

a291554c3b...18.exe

windows7-x64

7

a291554c3b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a291554c3bf660e516de220a1383d16d_JaffaCakes118

  • Size

    315KB

  • Sample

    240817-pwa62ayeqr

  • MD5

    a291554c3bf660e516de220a1383d16d

  • SHA1

    d2d9bfae85bf54d00f2b1dbc275adb05aba37439

  • SHA256

    a56a3c5179e681a76bf46a70c4e07b307db0addb9be09b17faf5706d2a8fdd6a

  • SHA512

    4b02ba6e80cc185e2a88e002c53b0db9312a929cfaba45fb0fffe57d2e23bf5db3c166bd39ef7a3abd7c0d3ac8dfbac7774a29a9b2c770898f7eedd44beffb18

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sEPKVV8LJ/3yk4/bHt4JNtlfj6gE7fA:91OgLdaNPAV8V//mbHt4XTfugEU

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      a291554c3bf660e516de220a1383d16d_JaffaCakes118

    • Size

      315KB

    • MD5

      a291554c3bf660e516de220a1383d16d

    • SHA1

      d2d9bfae85bf54d00f2b1dbc275adb05aba37439

    • SHA256

      a56a3c5179e681a76bf46a70c4e07b307db0addb9be09b17faf5706d2a8fdd6a

    • SHA512

      4b02ba6e80cc185e2a88e002c53b0db9312a929cfaba45fb0fffe57d2e23bf5db3c166bd39ef7a3abd7c0d3ac8dfbac7774a29a9b2c770898f7eedd44beffb18

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sEPKVV8LJ/3yk4/bHt4JNtlfj6gE7fA:91OgLdaNPAV8V//mbHt4XTfugEU

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks