484c4442bca21654fef3d6a238878db230448f7c37eac7643971aec88dd8a5b7 | Triage

Sharing

General

Target

3de50a8189ca09d707877b40abaf2cb5_JaffaCakes118
Size

125KB
Sample

241013-fgzreazeja
MD5

3de50a8189ca09d707877b40abaf2cb5
SHA1

ec76c3d410f1c10b0f61d33d4620d632aaf13177
SHA256

484c4442bca21654fef3d6a238878db230448f7c37eac7643971aec88dd8a5b7
SHA512

78b2e24f518b09aeddb4c0420f0b374849e0a22692a7b74094f75186d531f7a4e56cad8525dfaa8356f7a3d4d88b784d72cb83cdcdf3ceba5a09b0fcbd9b90a7
SSDEEP

3072:EmeDmBqskJV0v4d+gSASUSTHjlK1JQYWnXUn:E8EdcAiTJoHtn

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  3de50a8189ca09d707877b40abaf2cb5_JaffaCakes118
- Size
  
  125KB
- MD5
  
  3de50a8189ca09d707877b40abaf2cb5
- SHA1
  
  ec76c3d410f1c10b0f61d33d4620d632aaf13177
- SHA256
  
  484c4442bca21654fef3d6a238878db230448f7c37eac7643971aec88dd8a5b7
- SHA512
  
  78b2e24f518b09aeddb4c0420f0b374849e0a22692a7b74094f75186d531f7a4e56cad8525dfaa8356f7a3d4d88b784d72cb83cdcdf3ceba5a09b0fcbd9b90a7
- SSDEEP
  
  3072:EmeDmBqskJV0v4d+gSASUSTHjlK1JQYWnXUn:E8EdcAiTJoHtn
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer