743ede88f92832c569f9781971ad41d4bde0fa2b68757d4730a4f2dbedc20948 | Triage

Sharing

General

Target

b13b983e7046adc0a15f7d12b9ee8277_JaffaCakes118
Size

10KB
Sample

240820-27rpdascjk
MD5

b13b983e7046adc0a15f7d12b9ee8277
SHA1

e4d7f91ab1d904b84936b9917672ccbc2b58a585
SHA256

743ede88f92832c569f9781971ad41d4bde0fa2b68757d4730a4f2dbedc20948
SHA512

02202507ae9cee2c2f80a80c680301852a342b98e1d47db8774a54a1d6a21b8c26ed2fb53f94a80e54246a87a5bd8fe99e16ee702cae195f7eace5a28ef10369
SSDEEP

192:Yii0ffW7Q1iFnxXtVgq7mL+s8SKLkAaQntKOj8cQQdeFN+ZliQlkiuy:Yii0Wf1B7mLP7KLkAaWicQ8eDAQ4

Score

10^/10

adware discovery evasion stealer trojan

Malware Config

Targets

- Target
  
  b13b983e7046adc0a15f7d12b9ee8277_JaffaCakes118
- Size
  
  10KB
- MD5
  
  b13b983e7046adc0a15f7d12b9ee8277
- SHA1
  
  e4d7f91ab1d904b84936b9917672ccbc2b58a585
- SHA256
  
  743ede88f92832c569f9781971ad41d4bde0fa2b68757d4730a4f2dbedc20948
- SHA512
  
  02202507ae9cee2c2f80a80c680301852a342b98e1d47db8774a54a1d6a21b8c26ed2fb53f94a80e54246a87a5bd8fe99e16ee702cae195f7eace5a28ef10369
- SSDEEP
  
  192:Yii0ffW7Q1iFnxXtVgq7mL+s8SKLkAaQntKOj8cQQdeFN+ZliQlkiuy:Yii0Wf1B7mLP7KLkAaWicQ8eDAQ4
Score

10^/10

adware evasion stealer trojan discovery
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwareevasionstealertrojan

behavioral2

adwarediscoveryevasionstealertrojan