Overview

overview

7

Static

static

3

0beda18e79...18.exe

windows7-x64

7

0beda18e79...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0beda18e7948b199474073501a111771_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241002-ws1e3szdlm

  • MD5

    0beda18e7948b199474073501a111771

  • SHA1

    24231082fc667a70a73f8974de37534160d7a02b

  • SHA256

    52b5670cc35a46962d0880e2c6b6edcd8fe1c7cefbdb29b45fc1dbdef35e3ef7

  • SHA512

    34754b2efd304ccb52b94811061b9d4f77bd0c979446f5459725e0b07d5b9389965f968a6614a027eb8442e239c0bb3e2fd8114395bd063cf41416621869c009

  • SSDEEP

    24576:PLieg0AZJL0FdkAEQKZifZI0BF8Tj1obS+HObT7V1Okhq0GP71mJB:PLZAZJLuwRZiRjubnKkhm71O

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      0beda18e7948b199474073501a111771_JaffaCakes118

    • Size

      1.0MB

    • MD5

      0beda18e7948b199474073501a111771

    • SHA1

      24231082fc667a70a73f8974de37534160d7a02b

    • SHA256

      52b5670cc35a46962d0880e2c6b6edcd8fe1c7cefbdb29b45fc1dbdef35e3ef7

    • SHA512

      34754b2efd304ccb52b94811061b9d4f77bd0c979446f5459725e0b07d5b9389965f968a6614a027eb8442e239c0bb3e2fd8114395bd063cf41416621869c009

    • SSDEEP

      24576:PLieg0AZJL0FdkAEQKZifZI0BF8Tj1obS+HObT7V1Okhq0GP71mJB:PLZAZJLuwRZiRjubnKkhm71O

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks