044aaa8dffba8d21859c767d80d0009f7ab660e65a172af26d2d0995b3b31a38 | Triage

Sharing

General

Target

ee486714f834b548d16a9cf7a3fc45d3_JaffaCakes118
Size

117KB
Sample

240920-x9g6hatgjp
MD5

ee486714f834b548d16a9cf7a3fc45d3
SHA1

14ad963eb18e3b42621b00af7e10f91a60ee9f01
SHA256

044aaa8dffba8d21859c767d80d0009f7ab660e65a172af26d2d0995b3b31a38
SHA512

a5078fbcf815bf6fe610fd4001379cfce9bd99dcbd7c86dcd3308a3bc74b55393baa9b55e738d3b0e963fa4ae20723ff66c638c5c974fe58e916b7299601b7ce
SSDEEP

3072:0ABZvFX9H4XRWhOsmFIWjYde+3qnNOxd4:0ABZPH4XgSXYdnuN2d4

Score

10^/10

adware defense_evasion discovery evasion stealer

Malware Config

Targets

- Target
  
  ee486714f834b548d16a9cf7a3fc45d3_JaffaCakes118
- Size
  
  117KB
- MD5
  
  ee486714f834b548d16a9cf7a3fc45d3
- SHA1
  
  14ad963eb18e3b42621b00af7e10f91a60ee9f01
- SHA256
  
  044aaa8dffba8d21859c767d80d0009f7ab660e65a172af26d2d0995b3b31a38
- SHA512
  
  a5078fbcf815bf6fe610fd4001379cfce9bd99dcbd7c86dcd3308a3bc74b55393baa9b55e738d3b0e963fa4ae20723ff66c638c5c974fe58e916b7299601b7ce
- SSDEEP
  
  3072:0ABZvFX9H4XRWhOsmFIWjYde+3qnNOxd4:0ABZPH4XgSXYdnuN2d4
Score

10^/10

adware defense_evasion discovery evasion stealer
- Modifies firewall policy service
  evasion
- Deletes itself
- Loads dropped DLL
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwaredefense_evasiondiscoveryevasionstealer

behavioral2

adwaredefense_evasiondiscoveryevasionstealer