e1ed64a0c74d6f1e3381272ba45b3b148c1edf232ab18318079ceb3f997b9832 | Triage

Sharing

General

Target

b4f258eadecfe33cae5a7833edba344e_JaffaCakes118
Size

56KB
Sample

241130-fyp9astrdy
MD5

b4f258eadecfe33cae5a7833edba344e
SHA1

205dd3973d5f7ae4e5636b58fdfb4cad5737c0ce
SHA256

e1ed64a0c74d6f1e3381272ba45b3b148c1edf232ab18318079ceb3f997b9832
SHA512

6fabe4f01249fc0032f8f26e1b3c0341a7096974e9ed55522a14c68de4ed96637eda3f06c351cdceb7e208dd42ae9d8ed9c4f30fb7f384cbb320d96b10cc4c27
SSDEEP

1536:PwXVJwza5mfhFMPlrsFRyDlcBKlkKFtZR7Kmorc:YXryPG1wyhcBkZRroA

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  b4f258eadecfe33cae5a7833edba344e_JaffaCakes118
- Size
  
  56KB
- MD5
  
  b4f258eadecfe33cae5a7833edba344e
- SHA1
  
  205dd3973d5f7ae4e5636b58fdfb4cad5737c0ce
- SHA256
  
  e1ed64a0c74d6f1e3381272ba45b3b148c1edf232ab18318079ceb3f997b9832
- SHA512
  
  6fabe4f01249fc0032f8f26e1b3c0341a7096974e9ed55522a14c68de4ed96637eda3f06c351cdceb7e208dd42ae9d8ed9c4f30fb7f384cbb320d96b10cc4c27
- SSDEEP
  
  1536:PwXVJwza5mfhFMPlrsFRyDlcBKlkKFtZR7Kmorc:YXryPG1wyhcBkZRroA
Score

7^/10

adware discovery stealer
- Deletes itself
- Loads dropped DLL
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer