Overview

overview

8

Static

static

7

dd2a27d549...18.exe

windows7-x64

8

dd2a27d549...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd2a27d5492ca0980d04f09baf446b18_JaffaCakes118

  • Size

    18KB

  • Sample

    240912-2f5f6ayhra

  • MD5

    dd2a27d5492ca0980d04f09baf446b18

  • SHA1

    de1dabb1dc092eaddee4bdf9a35ab20e171383da

  • SHA256

    81fd3972e4376e5d0553d8bdddd889b759b4ca396a37815f86ee7a4583642a95

  • SHA512

    78e5ba061157453ce52549cd03050c92510f584b91550145d0b9b7ab43312c274489872bb98848d88c8ab2c7da503bf60520e67c7e23623702376f00bb25849e

  • SSDEEP

    384:cVlp3e2jIUhG/VgcgWqxIvG9caIVydSxDoiyEIaNJawcudoD7Uk:+vjIP/nkxqGyamydODgYnbcuyD7U

Score
8/10
adwarediscoverypersistencestealerupx

Malware Config

Targets

    • Target

      dd2a27d5492ca0980d04f09baf446b18_JaffaCakes118

    • Size

      18KB

    • MD5

      dd2a27d5492ca0980d04f09baf446b18

    • SHA1

      de1dabb1dc092eaddee4bdf9a35ab20e171383da

    • SHA256

      81fd3972e4376e5d0553d8bdddd889b759b4ca396a37815f86ee7a4583642a95

    • SHA512

      78e5ba061157453ce52549cd03050c92510f584b91550145d0b9b7ab43312c274489872bb98848d88c8ab2c7da503bf60520e67c7e23623702376f00bb25849e

    • SSDEEP

      384:cVlp3e2jIUhG/VgcgWqxIvG9caIVydSxDoiyEIaNJawcudoD7Uk:+vjIP/nkxqGyamydODgYnbcuyD7U

    Score
    8/10
    adwarediscoverypersistencestealerupx

    • Adds policy Run key to start application

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks