5b0d9aafde1891e720e4c9de4646c89bd95825fc1fe94e0bb8f382ac5dade118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d604456d693ead29881557040b5f12f_JaffaCakes118
Size

1007KB
Sample

241003-cakgcsscjg
MD5

0d604456d693ead29881557040b5f12f
SHA1

ccc284276c24fd46ae0bf256a540575b08716726
SHA256

5b0d9aafde1891e720e4c9de4646c89bd95825fc1fe94e0bb8f382ac5dade118
SHA512

9a6bc6d5907f2b401f76d46a35e46966f8021f479bfec9137cf70dc8abdb07b1517870d659a95ba0f5360518364ce28ac9534b7611eccc47851ab935a87777d0
SSDEEP

12288:9Vy9D2mUy3B7Pc5dNyPtfic86pGQ+pL5izeFEgRvp2mLyr1yLhL9xpGZPAIEYMyb:f81UyxgRy1rpGQ+PHXvp2m+IN3SA1aD

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  0d604456d693ead29881557040b5f12f_JaffaCakes118
- Size
  
  1007KB
- MD5
  
  0d604456d693ead29881557040b5f12f
- SHA1
  
  ccc284276c24fd46ae0bf256a540575b08716726
- SHA256
  
  5b0d9aafde1891e720e4c9de4646c89bd95825fc1fe94e0bb8f382ac5dade118
- SHA512
  
  9a6bc6d5907f2b401f76d46a35e46966f8021f479bfec9137cf70dc8abdb07b1517870d659a95ba0f5360518364ce28ac9534b7611eccc47851ab935a87777d0
- SSDEEP
  
  12288:9Vy9D2mUy3B7Pc5dNyPtfic86pGQ+pL5izeFEgRvp2mLyr1yLhL9xpGZPAIEYMyb:f81UyxgRy1rpGQ+PHXvp2m+IN3SA1aD
Score

7^/10

adware discovery stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer