30d4855331805259376db95d5f2e89c2b9a0196321e6f7e082884c39e351aed1 | Triage

Sharing

General

Target

cefbb53d11f7406fc08a6f8ce2caa206_JaffaCakes118
Size

487KB
Sample

240906-h6bf8atdpe
MD5

cefbb53d11f7406fc08a6f8ce2caa206
SHA1

c1e17a50d9e17b28e88d649222d03824c2811d6b
SHA256

30d4855331805259376db95d5f2e89c2b9a0196321e6f7e082884c39e351aed1
SHA512

64756f422effa4307c3bee74f374bb87e210656e5442fe42457d658c1f92bfda629f8471cd887555fdfe54d553d5e43c8c3de57e8940dde52b350ec677de03fb
SSDEEP

12288:O5lndfW0A1zqbhLuuHf8z5sxTlACGLRGQM:+ds1zeEoQ6xTlJORR

Score

6^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  cefbb53d11f7406fc08a6f8ce2caa206_JaffaCakes118
- Size
  
  487KB
- MD5
  
  cefbb53d11f7406fc08a6f8ce2caa206
- SHA1
  
  c1e17a50d9e17b28e88d649222d03824c2811d6b
- SHA256
  
  30d4855331805259376db95d5f2e89c2b9a0196321e6f7e082884c39e351aed1
- SHA512
  
  64756f422effa4307c3bee74f374bb87e210656e5442fe42457d658c1f92bfda629f8471cd887555fdfe54d553d5e43c8c3de57e8940dde52b350ec677de03fb
- SSDEEP
  
  12288:O5lndfW0A1zqbhLuuHf8z5sxTlACGLRGQM:+ds1zeEoQ6xTlJORR
Score

6^/10

adware discovery stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2