1735e0042b2690a63ae8f0a9adaafb27f01c987b9204285f998af74ab857b5c2 | Triage

Sharing

General

Target

ea50ecac05788fa48be8642fa67559a6_JaffaCakes118
Size

52KB
Sample

240919-bky7tstapj
MD5

ea50ecac05788fa48be8642fa67559a6
SHA1

27fb837307cf819f49d81b032433f0efb83defa7
SHA256

1735e0042b2690a63ae8f0a9adaafb27f01c987b9204285f998af74ab857b5c2
SHA512

a7f4fde47a585e9788365d96c47f7d666e6497651023b722ef8fd94c7af1e2951912b5d43377277e45f97e6a138cfd083637736cd000aad35a27157cd7e8bbc6
SSDEEP

768:AOhHYZwo8tATsAgcJEkDavy1ek7MGk9Y1BMYvoxQkdKb3dXNDBB7USf9:l6wouc2fy1J7MGH1SYhvtTBJ

Score

7^/10

adware defense_evasion discovery stealer

Malware Config

Targets

- Target
  
  ea50ecac05788fa48be8642fa67559a6_JaffaCakes118
- Size
  
  52KB
- MD5
  
  ea50ecac05788fa48be8642fa67559a6
- SHA1
  
  27fb837307cf819f49d81b032433f0efb83defa7
- SHA256
  
  1735e0042b2690a63ae8f0a9adaafb27f01c987b9204285f998af74ab857b5c2
- SHA512
  
  a7f4fde47a585e9788365d96c47f7d666e6497651023b722ef8fd94c7af1e2951912b5d43377277e45f97e6a138cfd083637736cd000aad35a27157cd7e8bbc6
- SSDEEP
  
  768:AOhHYZwo8tATsAgcJEkDavy1ek7MGk9Y1BMYvoxQkdKb3dXNDBB7USf9:l6wouc2fy1J7MGH1SYhvtTBJ
Score

7^/10

adware defense_evasion discovery stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwaredefense_evasiondiscoverystealer

behavioral2

adwaredefense_evasiondiscoverystealer