Overview

overview

7

Static

static

3

3dd2cdbe38...18.exe

windows7-x64

7

3dd2cdbe38...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3dd2cdbe38309a6aa36b53f38ae2d552_JaffaCakes118

  • Size

    718KB

  • Sample

    241013-e7q2hszara

  • MD5

    3dd2cdbe38309a6aa36b53f38ae2d552

  • SHA1

    6a53882865f040388f0aa29ccf181899ee7c1b27

  • SHA256

    e7aa0a5432e4473293ef50a18ade901aa95802a8ea6cd1dbb2f48f5ebe4025a6

  • SHA512

    e68f1edc9ea1cd005506cb863b35fe6eddc4789123482f507a70d788f59b12e29ef79d5e81d1054bd6b795021e9a71ce5f30d745c103c9e8e04c607ff77beeb1

  • SSDEEP

    12288:oKnekrL58F98U7VSA1oizErC7/Pej5VeyhKhe2vbfoioqVKBpifNMI8/z9HwbBiC:hLiEO5rOXeyhK8Ko4fNM/b9Hwxx

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      3dd2cdbe38309a6aa36b53f38ae2d552_JaffaCakes118

    • Size

      718KB

    • MD5

      3dd2cdbe38309a6aa36b53f38ae2d552

    • SHA1

      6a53882865f040388f0aa29ccf181899ee7c1b27

    • SHA256

      e7aa0a5432e4473293ef50a18ade901aa95802a8ea6cd1dbb2f48f5ebe4025a6

    • SHA512

      e68f1edc9ea1cd005506cb863b35fe6eddc4789123482f507a70d788f59b12e29ef79d5e81d1054bd6b795021e9a71ce5f30d745c103c9e8e04c607ff77beeb1

    • SSDEEP

      12288:oKnekrL58F98U7VSA1oizErC7/Pej5VeyhKhe2vbfoioqVKBpifNMI8/z9HwbBiC:hLiEO5rOXeyhK8Ko4fNM/b9Hwxx

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks