Overview

overview

7

Static

static

3

af8f1ed797...18.exe

windows7-x64

7

af8f1ed797...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    af8f1ed7971134be7e98c6640e6b63ff_JaffaCakes118

  • Size

    148KB

  • Sample

    240820-rnaxeazgrr

  • MD5

    af8f1ed7971134be7e98c6640e6b63ff

  • SHA1

    76dcd79694d924bc1c3b580059326cfa098f15af

  • SHA256

    613364d7d06754a835b6f034b7a3bf20a8a805dfd55e1542ef66de72cf4414a5

  • SHA512

    c0f2c889352fa61891c97673dfd2119f0d54ccadede7869bdb3fa98b2a418137ee081252eb9ed899346b9175a4ab4cee078c3eb709287d50c980739d3beaa035

  • SSDEEP

    3072:yziUjE5x5q4QmiqKxXn/Yg1MxpQAStrvGfmdV:yziUjE32/YgKKntzGU

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      af8f1ed7971134be7e98c6640e6b63ff_JaffaCakes118

    • Size

      148KB

    • MD5

      af8f1ed7971134be7e98c6640e6b63ff

    • SHA1

      76dcd79694d924bc1c3b580059326cfa098f15af

    • SHA256

      613364d7d06754a835b6f034b7a3bf20a8a805dfd55e1542ef66de72cf4414a5

    • SHA512

      c0f2c889352fa61891c97673dfd2119f0d54ccadede7869bdb3fa98b2a418137ee081252eb9ed899346b9175a4ab4cee078c3eb709287d50c980739d3beaa035

    • SSDEEP

      3072:yziUjE5x5q4QmiqKxXn/Yg1MxpQAStrvGfmdV:yziUjE32/YgKKntzGU

    Score
    7/10
    discoveryadwarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks