Overview

overview

7

Static

static

3

e242d8c560...18.exe

windows7-x64

7

e242d8c560...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e242d8c560c3a39e2bff1b2b59bf4f84_JaffaCakes118

  • Size

    313KB

  • Sample

    240915-mgmv6syeqd

  • MD5

    e242d8c560c3a39e2bff1b2b59bf4f84

  • SHA1

    b58fee6a0ca762ea7ea31b7e08cfd330ffd092c6

  • SHA256

    76d92fe5dd27ed3ef6704237455d27a6b423deb9770b6c5f2d8f0efbf124688b

  • SHA512

    c460e6ea0cc9ef8288dda54aff7571a270d04faead1ba864d21f1f4057a5ac6e395f1f518575b95eb9a586c45b44400cf06506a9cadf32e458deab8aaae58390

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s4p3naBjXO8pYgWOaRbSx0Ktn2hRnSVdeYU8BMV:91OgLdaNtSDOHfOWEn2PnUdeYU8BMV

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      e242d8c560c3a39e2bff1b2b59bf4f84_JaffaCakes118

    • Size

      313KB

    • MD5

      e242d8c560c3a39e2bff1b2b59bf4f84

    • SHA1

      b58fee6a0ca762ea7ea31b7e08cfd330ffd092c6

    • SHA256

      76d92fe5dd27ed3ef6704237455d27a6b423deb9770b6c5f2d8f0efbf124688b

    • SHA512

      c460e6ea0cc9ef8288dda54aff7571a270d04faead1ba864d21f1f4057a5ac6e395f1f518575b95eb9a586c45b44400cf06506a9cadf32e458deab8aaae58390

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s4p3naBjXO8pYgWOaRbSx0Ktn2hRnSVdeYU8BMV:91OgLdaNtSDOHfOWEn2PnUdeYU8BMV

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks