Overview

overview

7

Static

static

3

3cb4bab063...18.exe

windows7-x64

7

3cb4bab063...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3cb4bab06326e3ac319b8e6108b85836_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241012-3y297asflj

  • MD5

    3cb4bab06326e3ac319b8e6108b85836

  • SHA1

    7d309d6b36c66041146fea165988fc93cd2e0dcd

  • SHA256

    d1a46dc04d02ac9a3944249e705ee723bcc034f7effd604ef74f17722bc89618

  • SHA512

    a8a856c5e043ea5bd7e8bb725b253c7ff6267680d95193564ea7d6027ce44879772268ea80fc7c1d8f061d92f4a3d03cc8b3d9d4b62be9a6d6327e172d7ae89b

  • SSDEEP

    24576:h1OYdaO8OBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQD:h1OsZOEt5hDG0SAMs9j8nTJ2Y68hWGQD

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      3cb4bab06326e3ac319b8e6108b85836_JaffaCakes118

    • Size

      1.1MB

    • MD5

      3cb4bab06326e3ac319b8e6108b85836

    • SHA1

      7d309d6b36c66041146fea165988fc93cd2e0dcd

    • SHA256

      d1a46dc04d02ac9a3944249e705ee723bcc034f7effd604ef74f17722bc89618

    • SHA512

      a8a856c5e043ea5bd7e8bb725b253c7ff6267680d95193564ea7d6027ce44879772268ea80fc7c1d8f061d92f4a3d03cc8b3d9d4b62be9a6d6327e172d7ae89b

    • SSDEEP

      24576:h1OYdaO8OBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQD:h1OsZOEt5hDG0SAMs9j8nTJ2Y68hWGQD

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks