Overview

overview

8

Static

static

3

c8c416f5e0...18.exe

windows7-x64

8

c8c416f5e0...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8c416f5e032945b1e62de052caf2f2c_JaffaCakes118

  • Size

    15KB

  • Sample

    240829-n1nr9azeje

  • MD5

    c8c416f5e032945b1e62de052caf2f2c

  • SHA1

    4ccc3c2c35d072f2aabbcf9c3d699f68f285c3d7

  • SHA256

    37337a3d40a115bde0d26e025b128558d2ff38c2d061cde6114ae85430519303

  • SHA512

    63064b8524fdbac22cf2c34f917beb57ed10af7a2cb42dcafdfe6f4bb31e4921b623acd843c49f014d84b14a5df28d1763d15e06dae8c58ce82a6a880e24a9d3

  • SSDEEP

    384:IX76MjQKfHsIn/PLgGjzOchShYf1yuR6ed06Ce5KYE:LOfHJH8E/htf4Ca

Score
8/10
adwarediscoverypersistenceprivilege_escalationstealer

Malware Config

Targets

    • Target

      c8c416f5e032945b1e62de052caf2f2c_JaffaCakes118

    • Size

      15KB

    • MD5

      c8c416f5e032945b1e62de052caf2f2c

    • SHA1

      4ccc3c2c35d072f2aabbcf9c3d699f68f285c3d7

    • SHA256

      37337a3d40a115bde0d26e025b128558d2ff38c2d061cde6114ae85430519303

    • SHA512

      63064b8524fdbac22cf2c34f917beb57ed10af7a2cb42dcafdfe6f4bb31e4921b623acd843c49f014d84b14a5df28d1763d15e06dae8c58ce82a6a880e24a9d3

    • SSDEEP

      384:IX76MjQKfHsIn/PLgGjzOchShYf1yuR6ed06Ce5KYE:LOfHJH8E/htf4Ca

    Score
    8/10
    adwarediscoverypersistenceprivilege_escalationstealer

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks