e603b3a244e78c8fd6124c602bfe853cd258d238662ea0e86a4e96096f52f762 | Triage

Sharing

General

Target

bc994e18de263f5de6cc59f715f16955_JaffaCakes118
Size

62KB
Sample

240823-vn6kvsxbka
MD5

bc994e18de263f5de6cc59f715f16955
SHA1

b58af29f9f6345f622b93000ff9a58fb7fb87bef
SHA256

e603b3a244e78c8fd6124c602bfe853cd258d238662ea0e86a4e96096f52f762
SHA512

def6c221323b1d98be9a7affd4fda35f452dc039e01d4c9a6571d08c9b327ca7d854e58ddd7f775486584d7a664a95372e2ba38d932be1c38cd07429b139369e
SSDEEP

1536:TgoaNw3MlCcW0JcKPkhr+AkDfweVe1+6z:zyu2Cck48r+A0wJz

Score

10^/10

adware discovery evasion stealer trojan

Malware Config

Targets

- Target
  
  bc994e18de263f5de6cc59f715f16955_JaffaCakes118
- Size
  
  62KB
- MD5
  
  bc994e18de263f5de6cc59f715f16955
- SHA1
  
  b58af29f9f6345f622b93000ff9a58fb7fb87bef
- SHA256
  
  e603b3a244e78c8fd6124c602bfe853cd258d238662ea0e86a4e96096f52f762
- SHA512
  
  def6c221323b1d98be9a7affd4fda35f452dc039e01d4c9a6571d08c9b327ca7d854e58ddd7f775486584d7a664a95372e2ba38d932be1c38cd07429b139369e
- SSDEEP
  
  1536:TgoaNw3MlCcW0JcKPkhr+AkDfweVe1+6z:zyu2Cck48r+A0wJz
Score

10^/10

adware discovery evasion stealer trojan
- Windows security bypass
  evasion trojan
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryevasionstealertrojan

behavioral2

adwarediscoveryevasionstealertrojan