Overview

overview

7

Static

static

3

25b0742ff2...18.exe

windows7-x64

7

25b0742ff2...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    25b0742ff2bcd4d4070503c086c8cda3_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241008-1aqv5sscqa

  • MD5

    25b0742ff2bcd4d4070503c086c8cda3

  • SHA1

    c7f61c7ce84dad118c9df0c58fb1f45c8c793f81

  • SHA256

    e3a07813105961554dee1c8e11f79dd4390eec85f3c1fc0ee243b617f2d7d5a7

  • SHA512

    a7666f60d18c962441d7e10373f8de9036149a2687c31fba126c2c21a53c636d45237858666dfc75ccdeccceabaa9120d18660a230c94e7b6a1ca58eb8c5fcfd

  • SSDEEP

    24576:h1OYdaOuOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQS:h1OsPOEt5hDG0SAMs9j8nTJ2Y68hWGQS

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      25b0742ff2bcd4d4070503c086c8cda3_JaffaCakes118

    • Size

      1.1MB

    • MD5

      25b0742ff2bcd4d4070503c086c8cda3

    • SHA1

      c7f61c7ce84dad118c9df0c58fb1f45c8c793f81

    • SHA256

      e3a07813105961554dee1c8e11f79dd4390eec85f3c1fc0ee243b617f2d7d5a7

    • SHA512

      a7666f60d18c962441d7e10373f8de9036149a2687c31fba126c2c21a53c636d45237858666dfc75ccdeccceabaa9120d18660a230c94e7b6a1ca58eb8c5fcfd

    • SSDEEP

      24576:h1OYdaOuOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQS:h1OsPOEt5hDG0SAMs9j8nTJ2Y68hWGQS

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks