a34209ae6fe8961f8f5d5c76793ae43b2aa0f927b741017d67508b5281e7d67c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f7a9273863e4ec38f080763d206c1e7_JaffaCakes118
Size

932KB
Sample

241003-tcf1dsxbmb
MD5

0f7a9273863e4ec38f080763d206c1e7
SHA1

1cdec76da9116737199d22856bdb07c30ecd4ed3
SHA256

a34209ae6fe8961f8f5d5c76793ae43b2aa0f927b741017d67508b5281e7d67c
SHA512

5fd3484886c40ab8c452e9a22c7ace6bbc26ec9c7afb1a158d904cd84ba674750520ba6380b61e17481785e5622acca6cbf8a8bdf94b92ff9953ad139b835fde
SSDEEP

12288:l5Xe6gi+4Bb6uQa+qgYnEil+C/87dDEx+yppu5MOL9fTnxedGm97OmTxZpRqE/gt:pq4BbxLg6EiI7FY+QuaOL9f47OmlzR5c

Score

6^/10

adware discovery evasion persistence stealer trojan

Malware Config

Targets

- Target
  
  0f7a9273863e4ec38f080763d206c1e7_JaffaCakes118
- Size
  
  932KB
- MD5
  
  0f7a9273863e4ec38f080763d206c1e7
- SHA1
  
  1cdec76da9116737199d22856bdb07c30ecd4ed3
- SHA256
  
  a34209ae6fe8961f8f5d5c76793ae43b2aa0f927b741017d67508b5281e7d67c
- SHA512
  
  5fd3484886c40ab8c452e9a22c7ace6bbc26ec9c7afb1a158d904cd84ba674750520ba6380b61e17481785e5622acca6cbf8a8bdf94b92ff9953ad139b835fde
- SSDEEP
  
  12288:l5Xe6gi+4Bb6uQa+qgYnEil+C/87dDEx+yppu5MOL9fTnxedGm97OmTxZpRqE/gt:pq4BbxLg6EiI7FY+QuaOL9f47OmlzR5c
Score

6^/10

adware discovery evasion persistence stealer trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Browser Extensions

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryevasionpersistencestealertrojan

behavioral2

adwarediscoveryevasionpersistencestealertrojan