Overview

overview

8

Static

static

3

d6dfabf412...18.exe

windows7-x64

8

d6dfabf412...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6dfabf4120eb00a512e6e7c4a4d7330_JaffaCakes118

  • Size

    14KB

  • Sample

    240909-w5cvjssglj

  • MD5

    d6dfabf4120eb00a512e6e7c4a4d7330

  • SHA1

    a94899ac76234dfc92cf7d5995dd2e6cab57f93e

  • SHA256

    fdca4927824dc3ab6bfd9c217fe1e3650d0154d8cbdec936688b1234cc143f78

  • SHA512

    881dd0e64bf16ce015f5ff86ba2c2635abf80f37837715e1a6471058efb3deb66061f3b42b1de8c24f0113bf287d8fb41b9875ad7874e7f3ca539f44af8fa3ad

  • SSDEEP

    384:HVJ87NR32T3Oy8t3GOBcWlXx/LxFphz/XDvFEW8:r8ZR5GOFx/phz/XDNEW8

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      d6dfabf4120eb00a512e6e7c4a4d7330_JaffaCakes118

    • Size

      14KB

    • MD5

      d6dfabf4120eb00a512e6e7c4a4d7330

    • SHA1

      a94899ac76234dfc92cf7d5995dd2e6cab57f93e

    • SHA256

      fdca4927824dc3ab6bfd9c217fe1e3650d0154d8cbdec936688b1234cc143f78

    • SHA512

      881dd0e64bf16ce015f5ff86ba2c2635abf80f37837715e1a6471058efb3deb66061f3b42b1de8c24f0113bf287d8fb41b9875ad7874e7f3ca539f44af8fa3ad

    • SSDEEP

      384:HVJ87NR32T3Oy8t3GOBcWlXx/LxFphz/XDvFEW8:r8ZR5GOFx/phz/XDNEW8

    Score
    8/10
    adwarediscoverypersistencestealer

    • Adds policy Run key to start application

      persistence

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks