Overview

overview

7

Static

static

7

f582ae154b...18.exe

windows7-x64

7

f582ae154b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f582ae154b776dfac6b226447d7ca1a4_JaffaCakes118

  • Size

    405KB

  • Sample

    240925-jfml8swdjb

  • MD5

    f582ae154b776dfac6b226447d7ca1a4

  • SHA1

    c8c5c0a4a4697f7e616de7237c28909987eb1b4c

  • SHA256

    c5e359aa39003dc15a3a7a554e8b6e0a5ac42932e9958f006fc17e9005a820a9

  • SHA512

    d7e667e81b6133dd5c96a3ea5d22a1cb5a447a654d08df830d094d53da32d98c77ea6b18f840c100881537972732ca20f693a99970a3bc80c596e9aefba1cd74

  • SSDEEP

    12288:E0JhDF7VSejUIj1KTYVI80SvxBBjeWzQ7:E07VStMgkVJZh9Q7

Score
7/10
adwareaspackv2discoverystealer

Malware Config

Targets

    • Target

      f582ae154b776dfac6b226447d7ca1a4_JaffaCakes118

    • Size

      405KB

    • MD5

      f582ae154b776dfac6b226447d7ca1a4

    • SHA1

      c8c5c0a4a4697f7e616de7237c28909987eb1b4c

    • SHA256

      c5e359aa39003dc15a3a7a554e8b6e0a5ac42932e9958f006fc17e9005a820a9

    • SHA512

      d7e667e81b6133dd5c96a3ea5d22a1cb5a447a654d08df830d094d53da32d98c77ea6b18f840c100881537972732ca20f693a99970a3bc80c596e9aefba1cd74

    • SSDEEP

      12288:E0JhDF7VSejUIj1KTYVI80SvxBBjeWzQ7:E07VStMgkVJZh9Q7

    Score
    7/10
    adwareaspackv2discoverystealer

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks