Overview

overview

7

Static

static

5

3c15b52ea1...18.exe

windows7-x64

7

3c15b52ea1...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c15b52ea1c2b58ce03dcbfafff3f77a_JaffaCakes118

  • Size

    54KB

  • Sample

    241012-z6bwessajb

  • MD5

    3c15b52ea1c2b58ce03dcbfafff3f77a

  • SHA1

    6a0fa9e5b65abbb63463e79e47d288bf4973c8f5

  • SHA256

    e8f1ff497b968252dc4bec6b10cfeb8f3f05339ba23078e0f5e939d51a07beab

  • SHA512

    4405fac997ab33ed39bc750ff040de47a32dad3ac4c6322d130fd62dd3e8c5237caa6f274583dc376d79e797e56c9fea698a8e8f5b76f017586a2136a65a41d2

  • SSDEEP

    1536:xVgpCfgRHZIfVY1/ZhdIEftfCB6CaTAvWU:zgpHZIfVc//mEfxC5aTAv

Score
7/10
adwarediscoverystealerupx

Malware Config

Targets

    • Target

      3c15b52ea1c2b58ce03dcbfafff3f77a_JaffaCakes118

    • Size

      54KB

    • MD5

      3c15b52ea1c2b58ce03dcbfafff3f77a

    • SHA1

      6a0fa9e5b65abbb63463e79e47d288bf4973c8f5

    • SHA256

      e8f1ff497b968252dc4bec6b10cfeb8f3f05339ba23078e0f5e939d51a07beab

    • SHA512

      4405fac997ab33ed39bc750ff040de47a32dad3ac4c6322d130fd62dd3e8c5237caa6f274583dc376d79e797e56c9fea698a8e8f5b76f017586a2136a65a41d2

    • SSDEEP

      1536:xVgpCfgRHZIfVY1/ZhdIEftfCB6CaTAvWU:zgpHZIfVc//mEfxC5aTAv

    Score
    7/10
    adwarediscoverystealerupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks