1624ded999950266525fecb9117721404f665d3d9f581cb039f86bd10807ba7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1ebc00ea091572f0ca56bd9747355a9_JaffaCakes118
Size

52KB
Sample

240826-axd7ravbmf
MD5

c1ebc00ea091572f0ca56bd9747355a9
SHA1

db449e10d60c14d8fa737d3f385c2bb09f3ee26a
SHA256

1624ded999950266525fecb9117721404f665d3d9f581cb039f86bd10807ba7d
SHA512

c88a696c533f761c162b32724e684f044e24d4cb36fbdb3afeff11790f7ec8438ba1c757614009c9e3b16368a1be161e797aa8e4e7e1c46c8a28683b908fe847
SSDEEP

768:5PZpTAtvtoGurTeTIxElFj4+S3NfEiBlpRCY5SySp0CLnrKie81HsF:dvWrKTLxVf1F3fCLnrQ8tsF

Score

8^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  c1ebc00ea091572f0ca56bd9747355a9_JaffaCakes118
- Size
  
  52KB
- MD5
  
  c1ebc00ea091572f0ca56bd9747355a9
- SHA1
  
  db449e10d60c14d8fa737d3f385c2bb09f3ee26a
- SHA256
  
  1624ded999950266525fecb9117721404f665d3d9f581cb039f86bd10807ba7d
- SHA512
  
  c88a696c533f761c162b32724e684f044e24d4cb36fbdb3afeff11790f7ec8438ba1c757614009c9e3b16368a1be161e797aa8e4e7e1c46c8a28683b908fe847
- SSDEEP
  
  768:5PZpTAtvtoGurTeTIxElFj4+S3NfEiBlpRCY5SySp0CLnrKie81HsF:dvWrKTLxVf1F3fCLnrQ8tsF
Score

8^/10

adware discovery stealer
- Blocklisted process makes network request
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer