Overview

overview

7

Static

static

1

ad40df48e7...18.exe

windows7-x64

7

ad40df48e7...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad40df48e77c8cd20e56fa8fc48de3ee_JaffaCakes118

  • Size

    493KB

  • Sample

    240820-a4g7zsvdle

  • MD5

    ad40df48e77c8cd20e56fa8fc48de3ee

  • SHA1

    9253a67f25cdfa380fa6a5de191e7b4793ca6b4f

  • SHA256

    33e936db5abfdd508c7a0f632d7e3d0de4ee01279d1c1ecc97b99cee2b6dad1c

  • SHA512

    53bd97f27385ed3c8d109e40ee79db98aae4d778ed16ca8b49ab67a909feddd72d1dd716d646a36cdd824812084fd238783e31a05d35c4eee7267e5144696315

  • SSDEEP

    12288:ZaYWPh1az3BxVSQUmK7ruwAk3Ns+bIMrtl:wZI3lSpmgrzAAs+bIMrt

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      ad40df48e77c8cd20e56fa8fc48de3ee_JaffaCakes118

    • Size

      493KB

    • MD5

      ad40df48e77c8cd20e56fa8fc48de3ee

    • SHA1

      9253a67f25cdfa380fa6a5de191e7b4793ca6b4f

    • SHA256

      33e936db5abfdd508c7a0f632d7e3d0de4ee01279d1c1ecc97b99cee2b6dad1c

    • SHA512

      53bd97f27385ed3c8d109e40ee79db98aae4d778ed16ca8b49ab67a909feddd72d1dd716d646a36cdd824812084fd238783e31a05d35c4eee7267e5144696315

    • SSDEEP

      12288:ZaYWPh1az3BxVSQUmK7ruwAk3Ns+bIMrtl:wZI3lSpmgrzAAs+bIMrt

    Score
    7/10
    adwarediscoverystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks