Overview

overview

7

Static

static

5

JaffaCakes...a8.exe

windows7-x64

7

JaffaCakes...a8.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8acd44e199b7fd7396be915c1adbd4a8

  • Size

    11KB

  • Sample

    250328-stlfrsxydw

  • MD5

    8acd44e199b7fd7396be915c1adbd4a8

  • SHA1

    f7ce66a2a7b6939af7d06bda9dafcb8e2b34d465

  • SHA256

    82bcc90ad573b8292f26c5b2c55564d6bf3ddbee8fc4d6b15adc7e25b796defd

  • SHA512

    0b6a91eb48d1aff76abaf89169e47a9cc4929c8fac20dd418b93163e63b06e8afe7d3ed86683e11a529b2b8c078ca0d266cf3126fba8cba97af5fa61718f5f3f

  • SSDEEP

    192:8VAItwRngwLGgU42ljj0l63XF3e+5mUbxx2hJ+L0f+:8qh9bLRKjj0Q3XFd5rFwf+

Score
7/10
adwarediscoverypersistencestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_8acd44e199b7fd7396be915c1adbd4a8

    • Size

      11KB

    • MD5

      8acd44e199b7fd7396be915c1adbd4a8

    • SHA1

      f7ce66a2a7b6939af7d06bda9dafcb8e2b34d465

    • SHA256

      82bcc90ad573b8292f26c5b2c55564d6bf3ddbee8fc4d6b15adc7e25b796defd

    • SHA512

      0b6a91eb48d1aff76abaf89169e47a9cc4929c8fac20dd418b93163e63b06e8afe7d3ed86683e11a529b2b8c078ca0d266cf3126fba8cba97af5fa61718f5f3f

    • SSDEEP

      192:8VAItwRngwLGgU42ljj0l63XF3e+5mUbxx2hJ+L0f+:8qh9bLRKjj0Q3XFd5rFwf+

    Score
    7/10
    discoveryupxadwarepersistencestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks