Overview

overview

6

Static

static

3

1a6ee6fabc...18.exe

windows7-x64

6

1a6ee6fabc...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a6ee6fabc9cde0a9d82421db6210ca8_JaffaCakes118

  • Size

    40KB

  • Sample

    240628-rjs77atemb

  • MD5

    1a6ee6fabc9cde0a9d82421db6210ca8

  • SHA1

    402f4c8ef875a4563338f80d9ce4ab95eabbe0a6

  • SHA256

    8cd791a0723a478795283b65db709b282988daaa1009bbac16792b687760e39c

  • SHA512

    55462519e2d6f147a530b73b61245560044fe0c569d87f859408dc7937423ebf32c9925c4abcb93beca0f3b0d7b7f7bad78449ff3e9ad9c7be7163f83cd32fff

  • SSDEEP

    384:j172f4JBoit9WjznsUC0/WxCEy6GYgqD3W46p/6T:1KIBoitgp/W0EJ765U

Score
6/10
adwarestealer

Malware Config

Targets

    • Target

      1a6ee6fabc9cde0a9d82421db6210ca8_JaffaCakes118

    • Size

      40KB

    • MD5

      1a6ee6fabc9cde0a9d82421db6210ca8

    • SHA1

      402f4c8ef875a4563338f80d9ce4ab95eabbe0a6

    • SHA256

      8cd791a0723a478795283b65db709b282988daaa1009bbac16792b687760e39c

    • SHA512

      55462519e2d6f147a530b73b61245560044fe0c569d87f859408dc7937423ebf32c9925c4abcb93beca0f3b0d7b7f7bad78449ff3e9ad9c7be7163f83cd32fff

    • SSDEEP

      384:j172f4JBoit9WjznsUC0/WxCEy6GYgqD3W46p/6T:1KIBoitgp/W0EJ765U

    Score
    6/10
    adwarestealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks