Overview

overview

7

Static

static

1

ffd9845669...18.exe

windows7-x64

7

ffd9845669...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ffd9845669dcccaf33420476d859c960_JaffaCakes118

  • Size

    568KB

  • Sample

    240930-dtdctsvfnp

  • MD5

    ffd9845669dcccaf33420476d859c960

  • SHA1

    62db4b7c802602c930754cb848844ee1a10a036e

  • SHA256

    5623232315159976ad4990ac4a852582b28cf1837754ff17151e9419f99350da

  • SHA512

    c32245841c6767e5320b5398c9599f49266ef32ed262f8dab966dc979d75522caf2af18c3fc431b082beb1ffd72aa198a951e23982674f830e24a08e950b9eb3

  • SSDEEP

    12288:RdoQ6lMYi18hrj8Hb9IVP9gZAErSLbm0IXxoJaou0o7MauiTVu:T3hY98Hb9oVg+EQa3o/WuiTVu

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      ffd9845669dcccaf33420476d859c960_JaffaCakes118

    • Size

      568KB

    • MD5

      ffd9845669dcccaf33420476d859c960

    • SHA1

      62db4b7c802602c930754cb848844ee1a10a036e

    • SHA256

      5623232315159976ad4990ac4a852582b28cf1837754ff17151e9419f99350da

    • SHA512

      c32245841c6767e5320b5398c9599f49266ef32ed262f8dab966dc979d75522caf2af18c3fc431b082beb1ffd72aa198a951e23982674f830e24a08e950b9eb3

    • SSDEEP

      12288:RdoQ6lMYi18hrj8Hb9IVP9gZAErSLbm0IXxoJaou0o7MauiTVu:T3hY98Hb9oVg+EQa3o/WuiTVu

    Score
    7/10
    adwarediscoverystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks