Overview

overview

7

Static

static

3

0b557a3280...18.exe

windows7-x64

7

0b557a3280...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b557a3280d79d68e76b58d99f5c68f3_JaffaCakes118

  • Size

    57KB

  • Sample

    241002-sq9n7atbrk

  • MD5

    0b557a3280d79d68e76b58d99f5c68f3

  • SHA1

    2d399408fdb027b0128d21124cb17cd20aa45ba7

  • SHA256

    11ee4fd5ece95f10592e50e354e6c2c22f16343137900f3ddb92355d1600d7d1

  • SHA512

    244a73fe801076e11ca0de0a4e6a2594ae62a2d1c3d154892d852a7a152fb1c35a0901ca58c8bc201bfe70a7dc97d3c8fe49f55706da9c853b47b294c0b81116

  • SSDEEP

    768:3M8tiYVAJpX563v0I3VQOPVQsLfHS6jSi075latDYdgvB7ICfx1DPhFbzmY:3riYVABOveQ1Ie1zt

Score
7/10
adwarediscoverystealerupx

Malware Config

Targets

    • Target

      0b557a3280d79d68e76b58d99f5c68f3_JaffaCakes118

    • Size

      57KB

    • MD5

      0b557a3280d79d68e76b58d99f5c68f3

    • SHA1

      2d399408fdb027b0128d21124cb17cd20aa45ba7

    • SHA256

      11ee4fd5ece95f10592e50e354e6c2c22f16343137900f3ddb92355d1600d7d1

    • SHA512

      244a73fe801076e11ca0de0a4e6a2594ae62a2d1c3d154892d852a7a152fb1c35a0901ca58c8bc201bfe70a7dc97d3c8fe49f55706da9c853b47b294c0b81116

    • SSDEEP

      768:3M8tiYVAJpX563v0I3VQOPVQsLfHS6jSi075latDYdgvB7ICfx1DPhFbzmY:3riYVABOveQ1Ie1zt

    Score
    7/10
    adwarediscoverystealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks