c1d6dbb531b4d85df214ed975a5340f93fe43c53b93e1a12381ac370e4db5187 | Triage

Sharing

General

Target

ce2b5b8d68abf090181e46b3a3d01091_JaffaCakes118
Size

47KB
Sample

240905-3pxncavflc
MD5

ce2b5b8d68abf090181e46b3a3d01091
SHA1

d5e71aca912fb415e66890417322aad41ae1a3f9
SHA256

c1d6dbb531b4d85df214ed975a5340f93fe43c53b93e1a12381ac370e4db5187
SHA512

13bdc16b8170d03a4289e73fa27b23a22e8520970dfeb043255fce849aca0888d3050f0dc660a8b797b5a23db9503ae6498024d0a34abf599773a50aa39e5cc3
SSDEEP

768:rmNnDSb5J3a0N1DZKRkC4beGLJ8tRWX+mMKqRxXGFT0nEW:SO1W4qzcjFqPGFA

Score

7^/10

adware discovery evasion execution persistence stealer trojan

Malware Config

Targets

- Target
  
  ce2b5b8d68abf090181e46b3a3d01091_JaffaCakes118
- Size
  
  47KB
- MD5
  
  ce2b5b8d68abf090181e46b3a3d01091
- SHA1
  
  d5e71aca912fb415e66890417322aad41ae1a3f9
- SHA256
  
  c1d6dbb531b4d85df214ed975a5340f93fe43c53b93e1a12381ac370e4db5187
- SHA512
  
  13bdc16b8170d03a4289e73fa27b23a22e8520970dfeb043255fce849aca0888d3050f0dc660a8b797b5a23db9503ae6498024d0a34abf599773a50aa39e5cc3
- SSDEEP
  
  768:rmNnDSb5J3a0N1DZKRkC4beGLJ8tRWX+mMKqRxXGFT0nEW:SO1W4qzcjFqPGFA
Score

7^/10

adware discovery evasion execution persistence stealer trojan
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Browser Extensions

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryevasionexecutionpersistencestealertrojan

behavioral2

adwarediscoveryevasionexecutionpersistencestealertrojan