Overview

overview

7

Static

static

7

c13abeb27c...18.exe

windows7-x64

7

c13abeb27c...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c13abeb27c40dc536365db4ae945f5d4_JaffaCakes118

  • Size

    87KB

  • Sample

    240825-v32v8axejl

  • MD5

    c13abeb27c40dc536365db4ae945f5d4

  • SHA1

    b84a4ff9d3abf6e74c00b36ce0e12a9646ded7a2

  • SHA256

    c18432e48c36e03c6eb6e1adbd850e13b9b54ff8bb562a536ccbe4d50817490d

  • SHA512

    b2dd2337091ef93bcffd87e0f490584a25e38a57035b9b0c29a3e1fa3e7c72a447f562ccfdc5f831aa726934cebecccbfbf5ba0f1a1589f05cf7f62cf0af4f10

  • SSDEEP

    1536:KsfXh6ZXfFyoNCoGEvBlfXyoBncIe+E9WQKzuHkN1MAarP0nnRshPdBteJzYnvj:/fXh6ZXfFyhEp1XyoBncIeeSHqnG0nQV

Score
7/10
adwarediscoverypersistencestealerupx

Malware Config

Targets

    • Target

      c13abeb27c40dc536365db4ae945f5d4_JaffaCakes118

    • Size

      87KB

    • MD5

      c13abeb27c40dc536365db4ae945f5d4

    • SHA1

      b84a4ff9d3abf6e74c00b36ce0e12a9646ded7a2

    • SHA256

      c18432e48c36e03c6eb6e1adbd850e13b9b54ff8bb562a536ccbe4d50817490d

    • SHA512

      b2dd2337091ef93bcffd87e0f490584a25e38a57035b9b0c29a3e1fa3e7c72a447f562ccfdc5f831aa726934cebecccbfbf5ba0f1a1589f05cf7f62cf0af4f10

    • SSDEEP

      1536:KsfXh6ZXfFyoNCoGEvBlfXyoBncIe+E9WQKzuHkN1MAarP0nnRshPdBteJzYnvj:/fXh6ZXfFyhEp1XyoBncIeeSHqnG0nQV

    Score
    7/10
    adwarediscoverypersistencestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks