6980ae0a926e38f407e78c7ddf3ccab3bad157ec08c25b5c8c9c1d5cab7a6ea8 | Triage

Sharing

General

Target

f0ba467f6eafd29d1dd2e0b56568116a_JaffaCakes118
Size

10KB
Sample

240921-2az99axdqp
MD5

f0ba467f6eafd29d1dd2e0b56568116a
SHA1

04cdcbfe3ea5f5ca08343760291b4611b317c790
SHA256

6980ae0a926e38f407e78c7ddf3ccab3bad157ec08c25b5c8c9c1d5cab7a6ea8
SHA512

891d77cf3546ad1aa6b7e649bfa4059cf1986e5046820f672b28e6fa872fd5465fa5c7d4f75e9d72337dc2abe4de156276dd0c10e921c39d7868753a0aaa4492
SSDEEP

192:toeYAHdr/M9LWgbdcp6YpF8GT3F4bEXL4t/BKuflLj+TV3mUuzx5vpM1AD8fifFC:tdVdr/M+p6u8Q4wXYZKudn+5mx5+1AQv

Score

10^/10

adware discovery evasion stealer trojan

Malware Config

Targets

- Target
  
  f0ba467f6eafd29d1dd2e0b56568116a_JaffaCakes118
- Size
  
  10KB
- MD5
  
  f0ba467f6eafd29d1dd2e0b56568116a
- SHA1
  
  04cdcbfe3ea5f5ca08343760291b4611b317c790
- SHA256
  
  6980ae0a926e38f407e78c7ddf3ccab3bad157ec08c25b5c8c9c1d5cab7a6ea8
- SHA512
  
  891d77cf3546ad1aa6b7e649bfa4059cf1986e5046820f672b28e6fa872fd5465fa5c7d4f75e9d72337dc2abe4de156276dd0c10e921c39d7868753a0aaa4492
- SSDEEP
  
  192:toeYAHdr/M9LWgbdcp6YpF8GT3F4bEXL4t/BKuflLj+TV3mUuzx5vpM1AD8fifFC:tdVdr/M+p6u8Q4wXYZKudn+5mx5+1AQv
Score

10^/10

adware evasion stealer trojan discovery
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwareevasionstealertrojan

behavioral2

adwarediscoveryevasionstealertrojan