Overview

overview

7

Static

static

1

0586d27b9d...18.exe

windows7-x64

7

0586d27b9d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0586d27b9da5537dc68d114815efc582_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240428-s5rf6aba56

  • MD5

    0586d27b9da5537dc68d114815efc582

  • SHA1

    cf5508492c9ce2f2b6d5fabe51519d2633641ca5

  • SHA256

    cde710232b602f60341ae97098354b66f15a3e5e998d42920e1af98aef54ba75

  • SHA512

    e8a7a288e15fc4f0910696e97a4ce0683845f11cbb68a2c678d378e2ebd3668133cb1c331cd9753daa7bb985a9d2d7c908c8563ce4d00954eedcfbd061e448e8

  • SSDEEP

    24576:ETQvtAYMyd70sKP4SAEkh6zSfjFAtxCq9JpXkziKpHen0Z:0WtAm7O4fhOeFG/9JZkziKpGC

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      0586d27b9da5537dc68d114815efc582_JaffaCakes118

    • Size

      1.0MB

    • MD5

      0586d27b9da5537dc68d114815efc582

    • SHA1

      cf5508492c9ce2f2b6d5fabe51519d2633641ca5

    • SHA256

      cde710232b602f60341ae97098354b66f15a3e5e998d42920e1af98aef54ba75

    • SHA512

      e8a7a288e15fc4f0910696e97a4ce0683845f11cbb68a2c678d378e2ebd3668133cb1c331cd9753daa7bb985a9d2d7c908c8563ce4d00954eedcfbd061e448e8

    • SSDEEP

      24576:ETQvtAYMyd70sKP4SAEkh6zSfjFAtxCq9JpXkziKpHen0Z:0WtAm7O4fhOeFG/9JZkziKpGC

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks