Overview

overview

8

Static

static

3

2b41ca1c73...18.exe

windows7-x64

8

2b41ca1c73...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b41ca1c7327cf44d84e3b015bb86a9c_JaffaCakes118

  • Size

    26KB

  • Sample

    241009-flnvpszekn

  • MD5

    2b41ca1c7327cf44d84e3b015bb86a9c

  • SHA1

    b5d7293923ba6203dd0aa8819a7d902614e5726a

  • SHA256

    f4781d6b4c16962f033aa8dabc0875f1d7bb29c48520fa6883bfb3b316624b2d

  • SHA512

    a5cd42b665225c51ce4b9554cb0f57e763a56bf13b448c87d9f4a6e1a0c007481570b9502a53819463e5831689872243a1d30e74f0f53c419f8e0676564330ec

  • SSDEEP

    768:Xbs0hxm5QyhuMkmPP8cXK4I+QRb4k4v9:Xbsr5Qy7EcXKV98ks

Score
8/10
adwarediscoverypersistencestealerupx

Malware Config

Targets

    • Target

      2b41ca1c7327cf44d84e3b015bb86a9c_JaffaCakes118

    • Size

      26KB

    • MD5

      2b41ca1c7327cf44d84e3b015bb86a9c

    • SHA1

      b5d7293923ba6203dd0aa8819a7d902614e5726a

    • SHA256

      f4781d6b4c16962f033aa8dabc0875f1d7bb29c48520fa6883bfb3b316624b2d

    • SHA512

      a5cd42b665225c51ce4b9554cb0f57e763a56bf13b448c87d9f4a6e1a0c007481570b9502a53819463e5831689872243a1d30e74f0f53c419f8e0676564330ec

    • SSDEEP

      768:Xbs0hxm5QyhuMkmPP8cXK4I+QRb4k4v9:Xbsr5Qy7EcXKV98ks

    Score
    8/10
    adwarediscoverypersistencestealerupx

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks