Overview

overview

7

Static

static

3

459afff725...18.exe

windows7-x64

7

459afff725...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    459afff7252aee12946d12dfc44b2c08_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241015-dy4etaweql

  • MD5

    459afff7252aee12946d12dfc44b2c08

  • SHA1

    ad24e0de3adbacc7ce34e3f856eb2f50b13fa9d6

  • SHA256

    67f521ff40dcf691d50e0981e35adc1f782dcdd3473615cffdf18b76c9f4bc90

  • SHA512

    0143d4f05907dba69d322ae2f6fe45cdb4979b05ac34e85e728e99328bc71d73dc25efe254e01023cb9cbe652942a9af659ac377c1d91a7aeb333574b4638c4e

  • SSDEEP

    24576:h1OYdaOQOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQG:h1OspOEt5hDG0SAMs9j8nTJ2Y68hWGQG

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      459afff7252aee12946d12dfc44b2c08_JaffaCakes118

    • Size

      1.1MB

    • MD5

      459afff7252aee12946d12dfc44b2c08

    • SHA1

      ad24e0de3adbacc7ce34e3f856eb2f50b13fa9d6

    • SHA256

      67f521ff40dcf691d50e0981e35adc1f782dcdd3473615cffdf18b76c9f4bc90

    • SHA512

      0143d4f05907dba69d322ae2f6fe45cdb4979b05ac34e85e728e99328bc71d73dc25efe254e01023cb9cbe652942a9af659ac377c1d91a7aeb333574b4638c4e

    • SSDEEP

      24576:h1OYdaOQOBsFEt5hDG0SAMs9jR/jaJnTJdwY68+UhnWb3aQG:h1OspOEt5hDG0SAMs9j8nTJ2Y68hWGQG

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks