Overview

overview

7

Static

static

5

JaffaCakes...2c.exe

windows7-x64

7

JaffaCakes...2c.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8ac0f510fb9a027c88395b6d3b67b92c

  • Size

    13KB

  • Sample

    250328-rwn41axtdy

  • MD5

    8ac0f510fb9a027c88395b6d3b67b92c

  • SHA1

    bcccf1009f8e768b2cc77135120db75277fbd20b

  • SHA256

    2670fe58cc390fac739d2b162bffac5b76be8c32607a39d1a85297c9fd21fb34

  • SHA512

    36407f15b0db86539b7d1bf122730cafa85d965d78c1af06ba0c905d73aac6bcc8141be37f6b055ba89ea19dc9835f71f2ddd2534c778e6556d7af0fcb977744

  • SSDEEP

    192:1jDxvOhd+DyxGy3zzqLrNBW2MwtsY12JpdOEyncjWO3L/eagnldolMmD7:1jDMb+DyE2HqtBMwF1+pgnoLMcZ

Score
7/10
adwarediscoverystealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_8ac0f510fb9a027c88395b6d3b67b92c

    • Size

      13KB

    • MD5

      8ac0f510fb9a027c88395b6d3b67b92c

    • SHA1

      bcccf1009f8e768b2cc77135120db75277fbd20b

    • SHA256

      2670fe58cc390fac739d2b162bffac5b76be8c32607a39d1a85297c9fd21fb34

    • SHA512

      36407f15b0db86539b7d1bf122730cafa85d965d78c1af06ba0c905d73aac6bcc8141be37f6b055ba89ea19dc9835f71f2ddd2534c778e6556d7af0fcb977744

    • SSDEEP

      192:1jDxvOhd+DyxGy3zzqLrNBW2MwtsY12JpdOEyncjWO3L/eagnldolMmD7:1jDMb+DyE2HqtBMwF1+pgnoLMcZ

    Score
    7/10
    adwarediscoverystealerupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks