Overview

overview

7

Static

static

3

116a0310b0...18.exe

windows7-x64

7

116a0310b0...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    116a0310b0b26c8c498b2ebe3f8a0eb4_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241004-cneg9sygjl

  • MD5

    116a0310b0b26c8c498b2ebe3f8a0eb4

  • SHA1

    deb4c35f4b4efd2437d81e08231ac431254450c3

  • SHA256

    aac4f92f86f17f1e8ee1a9bbfb7f800e680fee5c171b020152f21c3740bf45da

  • SHA512

    5f6bb6f07d564b685fa463c6b118a3fb9a6012ce09b59c5be505a86fe06e889343dc95b354776abda86461ed41afcb5ea94b48d50d6bdab93d796fd38be123ab

  • SSDEEP

    24576:h1OYdaOFOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQz:h1OsuOEt5hDG0SAMs9j8nTJ2Y68hWGQz

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      116a0310b0b26c8c498b2ebe3f8a0eb4_JaffaCakes118

    • Size

      1.1MB

    • MD5

      116a0310b0b26c8c498b2ebe3f8a0eb4

    • SHA1

      deb4c35f4b4efd2437d81e08231ac431254450c3

    • SHA256

      aac4f92f86f17f1e8ee1a9bbfb7f800e680fee5c171b020152f21c3740bf45da

    • SHA512

      5f6bb6f07d564b685fa463c6b118a3fb9a6012ce09b59c5be505a86fe06e889343dc95b354776abda86461ed41afcb5ea94b48d50d6bdab93d796fd38be123ab

    • SSDEEP

      24576:h1OYdaOFOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQz:h1OsuOEt5hDG0SAMs9j8nTJ2Y68hWGQz

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks