Overview

overview

7

Static

static

1

Detnox Fre...ar.exe

windows7-x64

7

Detnox Fre...ar.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a0ccf0edd7e5cfaf668398ce97d55ab_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241009-d4ct2s1clr

  • MD5

    2a0ccf0edd7e5cfaf668398ce97d55ab

  • SHA1

    a7b6a4c99c84dcdea1436d08474d22623a53649b

  • SHA256

    288fb950de71720373df5d09adbc9c3c11442d7d92f4f32042a4591c9cfd339b

  • SHA512

    6d086034c3f4e01573d852c637f6f696e41a40c297e813763d688d535ac0dfc7d3b40c83d33300f418e9e60e94e2d6fbe24e5e26d34451ff255d3fc51561aaea

  • SSDEEP

    24576:gPbtzH7uGFI0fYruNbJI4gpVRe5r5JL8PTmZnkVzjwJglw/:aR3P20fO8I9O5r5XZnkwGlQ

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      Detnox Free Registry Scanner Toolbar/detnoxfreescantoolbar.exe

    • Size

      1.3MB

    • MD5

      8084e1a5e3afa48121e25eb46b36d8e2

    • SHA1

      5afe3eeb7f0fd3b73347c185474a24d3ffb6add6

    • SHA256

      2a7292ff80cee91d9d604159ac69045a9288c4f25a637458dcea11d3626b38b5

    • SHA512

      39b72fc0f838bf8bdd13cc6b0dea23b9cdc3e75bdec28e380c069f6c55f42e63fdd706fa4ae44c2d58e5018be552c667b39481d53f657c8c25df68230dbad6f3

    • SSDEEP

      24576:Ak5MoFN3mNbnI+SOe5n51viPklFHaYixqlOXtwXghDQ:AkdX4IB5n539ioewwh0

    Score
    7/10
    adwarediscoverystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks