Overview

overview

7

Static

static

3

d618d55b17...18.exe

windows7-x64

7

d618d55b17...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d618d55b17b4ccc24f8943fb11297faa_JaffaCakes118

  • Size

    3.7MB

  • Sample

    240909-l4rbfavejb

  • MD5

    d618d55b17b4ccc24f8943fb11297faa

  • SHA1

    e41d51de23824e3e0eb722dacc1eec98d009d419

  • SHA256

    ec1ef2b60e51fb69488aabba472a90eba7139d09d17d0f5f9ad9deb4a62baf44

  • SHA512

    8d164236251d8222c718e980364e0b3288761655722b0de048d2e5ddb5f6a58ced01daf0febc621f974ee5d2dee03fe43f77e91f6d310236e1b9678e3add96a0

  • SSDEEP

    98304:FLFI2e4GQqqUNF23HulTb++2ZSu8qNR8Sf1M3+q6CM3k:FfQPNI3Olj2sI/ne5n

Score
7/10
discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      d618d55b17b4ccc24f8943fb11297faa_JaffaCakes118

    • Size

      3.7MB

    • MD5

      d618d55b17b4ccc24f8943fb11297faa

    • SHA1

      e41d51de23824e3e0eb722dacc1eec98d009d419

    • SHA256

      ec1ef2b60e51fb69488aabba472a90eba7139d09d17d0f5f9ad9deb4a62baf44

    • SHA512

      8d164236251d8222c718e980364e0b3288761655722b0de048d2e5ddb5f6a58ced01daf0febc621f974ee5d2dee03fe43f77e91f6d310236e1b9678e3add96a0

    • SSDEEP

      98304:FLFI2e4GQqqUNF23HulTb++2ZSu8qNR8Sf1M3+q6CM3k:FfQPNI3Olj2sI/ne5n

    Score
    7/10
    discoverypersistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks