0e78392e4df9088e12d3c3a604f8ea936631aaa5b6b40372cecaaad38140bda1 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

1a707048a6...18.exe

windows7-x64

7

1a707048a6...18.exe

windows10-2004-x64

7

Sharing

General

Target

1a707048a67b017c6541fbd6890b7c44_JaffaCakes118
Size

52KB
Sample

240628-rlahvsterg
MD5

1a707048a67b017c6541fbd6890b7c44
SHA1

933f0881e402213bea35605041bb768c90c115e8
SHA256

0e78392e4df9088e12d3c3a604f8ea936631aaa5b6b40372cecaaad38140bda1
SHA512

22b41bedee5cf62acd4552f88c37dc835615fbb1e0a84800eb361a2d160cbd2458e204a7badacb7aea9f94f783da6535d77bc5b1ac6102343ae33e35ab771dfe
SSDEEP

768:VLi0NnqrjIcGA+9H5MQO7BUdLOyOLm/Cb5vTOc74Hpyfogpty2uhNqFeTCjC0b4:ViHIcz+j0W2QA5v974JyZuCv2

Score

7^/10

adware evasion stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

1a707048a67b017c6541fbd6890b7c44_JaffaCakes118.exe

Resource

win7-20240508-en

adware evasion stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

1a707048a67b017c6541fbd6890b7c44_JaffaCakes118.exe

Resource

win10v2004-20240611-en

adware evasion stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  1a707048a67b017c6541fbd6890b7c44_JaffaCakes118
- Size
  
  52KB
- MD5
  
  1a707048a67b017c6541fbd6890b7c44
- SHA1
  
  933f0881e402213bea35605041bb768c90c115e8
- SHA256
  
  0e78392e4df9088e12d3c3a604f8ea936631aaa5b6b40372cecaaad38140bda1
- SHA512
  
  22b41bedee5cf62acd4552f88c37dc835615fbb1e0a84800eb361a2d160cbd2458e204a7badacb7aea9f94f783da6535d77bc5b1ac6102343ae33e35ab771dfe
- SSDEEP
  
  768:VLi0NnqrjIcGA+9H5MQO7BUdLOyOLm/Cb5vTOc74Hpyfogpty2uhNqFeTCjC0b4:ViHIcz+j0W2QA5v974JyZuCv2
Score

7^/10

adware evasion stealer trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops desktop.ini file(s)
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

adwareevasionstealertrojan

behavioral2

adwareevasionstealertrojan

© 2018-2024

Terms | Privacy