94bfdfef0faac4de654989fa06113366845935bb624a3f66871f34e520e428d7 | Triage

Sharing

General

Target

ad462aea45e49ab9bc8b514560dcce20_JaffaCakes118
Size

9KB
Sample

240820-a8sjhsvfng
MD5

ad462aea45e49ab9bc8b514560dcce20
SHA1

9e95db836b1411d58120bd2a39dcb20e60c0ebb1
SHA256

94bfdfef0faac4de654989fa06113366845935bb624a3f66871f34e520e428d7
SHA512

39521a822d4053872adfe53f8c80b1b53b17a9c25d0c27b3bb10a931e9d7ea1125119e604ed98f90c9d8a4c13275ff03ffbfa03a1e2ae544282fcd2d4adf611c
SSDEEP

192:+u7iB7fZlXF0f4dtZ14LRzO1n6VqX9n35lY:+u+BDe4dtZaBOt6Vqtn3

Score

10^/10

adware discovery evasion stealer trojan

Malware Config

Targets

- Target
  
  ad462aea45e49ab9bc8b514560dcce20_JaffaCakes118
- Size
  
  9KB
- MD5
  
  ad462aea45e49ab9bc8b514560dcce20
- SHA1
  
  9e95db836b1411d58120bd2a39dcb20e60c0ebb1
- SHA256
  
  94bfdfef0faac4de654989fa06113366845935bb624a3f66871f34e520e428d7
- SHA512
  
  39521a822d4053872adfe53f8c80b1b53b17a9c25d0c27b3bb10a931e9d7ea1125119e604ed98f90c9d8a4c13275ff03ffbfa03a1e2ae544282fcd2d4adf611c
- SSDEEP
  
  192:+u7iB7fZlXF0f4dtZ14LRzO1n6VqX9n35lY:+u+BDe4dtZaBOt6Vqtn3
Score

10^/10

adware evasion stealer trojan discovery
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwareevasionstealertrojan

behavioral2

adwarediscoveryevasionstealertrojan