Overview

overview

8

Static

static

3

0849e5ddcd...18.exe

windows7-x64

8

0849e5ddcd...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0849e5ddcdd4c3ab2d35e55d4c824edc_JaffaCakes118

  • Size

    480KB

  • Sample

    241002-b2t97s1brm

  • MD5

    0849e5ddcdd4c3ab2d35e55d4c824edc

  • SHA1

    7b12f01349ea7be1aae8285741befa3719778038

  • SHA256

    6ef13ddae106a2203e94dae126c05bc4e19ce2ab99243fae78157cc48c62b995

  • SHA512

    cab50953e46159391d5700d32455e00787fff851c3ab989629c188d0958d46187c7acfac7b6370b381bfa3ddcbae45e1e5e4c0f2bd889b55bad3f944490c88af

  • SSDEEP

    6144:9Nc4Jjvl/4vUzQ2+edERhTZN0lQBoJDxJsdupHe5YezOZTWKxQUjPLxE4SvZe:9dlswF+edERzilQ6Hmd6JuWPgvs

Score
8/10
adwarebootkitdiscoverypersistencestealer

Malware Config

Targets

    • Target

      0849e5ddcdd4c3ab2d35e55d4c824edc_JaffaCakes118

    • Size

      480KB

    • MD5

      0849e5ddcdd4c3ab2d35e55d4c824edc

    • SHA1

      7b12f01349ea7be1aae8285741befa3719778038

    • SHA256

      6ef13ddae106a2203e94dae126c05bc4e19ce2ab99243fae78157cc48c62b995

    • SHA512

      cab50953e46159391d5700d32455e00787fff851c3ab989629c188d0958d46187c7acfac7b6370b381bfa3ddcbae45e1e5e4c0f2bd889b55bad3f944490c88af

    • SSDEEP

      6144:9Nc4Jjvl/4vUzQ2+edERhTZN0lQBoJDxJsdupHe5YezOZTWKxQUjPLxE4SvZe:9dlswF+edERzilQ6Hmd6JuWPgvs

    Score
    8/10
    adwarebootkitdiscoverypersistencestealer

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks