Overview

overview

8

Static

static

7

eaba9f90a8...18.exe

windows7-x64

8

eaba9f90a8...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eaba9f90a8f41bc149c578fe6350875f_JaffaCakes118

  • Size

    186KB

  • Sample

    240919-gvjg1sthmc

  • MD5

    eaba9f90a8f41bc149c578fe6350875f

  • SHA1

    509aa36760737e9f4d038331137798adfba25dab

  • SHA256

    5129bca4bb22a33e7921697bbe858339abf7dcc4ee0b829a3e36f5fb2463e19e

  • SHA512

    0d3e09a3d4ec62d117ecbb32a3a8708f8a15f521ec964d24d6bf8361507032e50e8827ea1e67dd0316a1611553382900d7f8b0bbfd3d9d314dfb7ea2baf8a1bd

  • SSDEEP

    3072:4se+a4qmFBRCjNbc2NalmlwcuuZZCceyjLcjs8ZNXcbO9CsW5jWPO4kK03qYK:4seV45ChNL5uuZEQjCs4sbqVWtq

Score
8/10
adwarediscoverypersistencestealerupx

Malware Config

Targets

    • Target

      eaba9f90a8f41bc149c578fe6350875f_JaffaCakes118

    • Size

      186KB

    • MD5

      eaba9f90a8f41bc149c578fe6350875f

    • SHA1

      509aa36760737e9f4d038331137798adfba25dab

    • SHA256

      5129bca4bb22a33e7921697bbe858339abf7dcc4ee0b829a3e36f5fb2463e19e

    • SHA512

      0d3e09a3d4ec62d117ecbb32a3a8708f8a15f521ec964d24d6bf8361507032e50e8827ea1e67dd0316a1611553382900d7f8b0bbfd3d9d314dfb7ea2baf8a1bd

    • SSDEEP

      3072:4se+a4qmFBRCjNbc2NalmlwcuuZZCceyjLcjs8ZNXcbO9CsW5jWPO4kK03qYK:4seV45ChNL5uuZEQjCs4sbqVWtq

    Score
    8/10
    adwarediscoverypersistencestealerupx

    • Server Software Component: Terminal Services DLL

      persistence

    • Sets service image path in registry

      persistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks