b05512d09cedc8953bb0edd6418b3ba69f99b0b451af521f2d37a50970bd6ce1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e7c7803d9a3dab9d139cc362976d587_JaffaCakes118
Size

248KB
Sample

241013-hz6c1syfjj
MD5

3e7c7803d9a3dab9d139cc362976d587
SHA1

50b922a9e57ad1eb2b3113346e7c4c11132913f0
SHA256

b05512d09cedc8953bb0edd6418b3ba69f99b0b451af521f2d37a50970bd6ce1
SHA512

e5af71a723be369b1f3325b31bc06d915ccba233c2d351fa3a6fae3ce724b699b366e88c3075169f50096e806d0b5041b2f650df4c3b3d29e7ce39a071f91101
SSDEEP

6144:XdHeBmklqg//gKXK4R6grul7P4FNmLlqTuRdzh:XlCNEOxK4R6grutcNmxTt

Score

8^/10

adware discovery persistence stealer

Malware Config

Targets

- Target
  
  3e7c7803d9a3dab9d139cc362976d587_JaffaCakes118
- Size
  
  248KB
- MD5
  
  3e7c7803d9a3dab9d139cc362976d587
- SHA1
  
  50b922a9e57ad1eb2b3113346e7c4c11132913f0
- SHA256
  
  b05512d09cedc8953bb0edd6418b3ba69f99b0b451af521f2d37a50970bd6ce1
- SHA512
  
  e5af71a723be369b1f3325b31bc06d915ccba233c2d351fa3a6fae3ce724b699b366e88c3075169f50096e806d0b5041b2f650df4c3b3d29e7ce39a071f91101
- SSDEEP
  
  6144:XdHeBmklqg//gKXK4R6grul7P4FNmLlqTuRdzh:XlCNEOxK4R6grutcNmxTt
Score

8^/10

adware discovery persistence stealer
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2

adwarediscoverypersistencestealer