dae216f68b95d8f6e77d6089d5db382a87f1fa75c093f1f83656d091cae7bde9 | Triage

Sharing

General

Target

2987971c53a3e3ea7de63d5aeb2a9cee_JaffaCakes118
Size

47KB
Sample

241009-ddaa8s1ekc
MD5

2987971c53a3e3ea7de63d5aeb2a9cee
SHA1

86ffe38cf6175ecf6a127ecbcf70d83782e175c0
SHA256

dae216f68b95d8f6e77d6089d5db382a87f1fa75c093f1f83656d091cae7bde9
SHA512

93c11a9949005ee74daaab94bf7f480b194d03f323d88d7a691fb9759be7d8163f29b3ca1b481f4987cc4b06e8ee53633baabe67a524418a9fb281edd17c87a8
SSDEEP

768:rmNnDSb5J3a0N1DZKRkC4beGLJ8tRWX+mMKqRxXGFT0nEWa:SO1W4qzcjFqPGFA

Score

7^/10

adware discovery evasion execution persistence stealer trojan

Malware Config

Targets

- Target
  
  2987971c53a3e3ea7de63d5aeb2a9cee_JaffaCakes118
- Size
  
  47KB
- MD5
  
  2987971c53a3e3ea7de63d5aeb2a9cee
- SHA1
  
  86ffe38cf6175ecf6a127ecbcf70d83782e175c0
- SHA256
  
  dae216f68b95d8f6e77d6089d5db382a87f1fa75c093f1f83656d091cae7bde9
- SHA512
  
  93c11a9949005ee74daaab94bf7f480b194d03f323d88d7a691fb9759be7d8163f29b3ca1b481f4987cc4b06e8ee53633baabe67a524418a9fb281edd17c87a8
- SSDEEP
  
  768:rmNnDSb5J3a0N1DZKRkC4beGLJ8tRWX+mMKqRxXGFT0nEWa:SO1W4qzcjFqPGFA
Score

7^/10

adware discovery evasion execution persistence stealer trojan
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Browser Extensions

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryevasionexecutionpersistencestealertrojan

behavioral2

adwarediscoveryevasionexecutionpersistencestealertrojan