Overview

overview

7

Static

static

7

1be83ef9fa...18.exe

windows7-x64

7

1be83ef9fa...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1be83ef9faa2b8e2b276d8c1022eb3ba_JaffaCakes118

  • Size

    416KB

  • Sample

    240329-h2r86sch34

  • MD5

    1be83ef9faa2b8e2b276d8c1022eb3ba

  • SHA1

    9004d73a00d48631406b105efb3451e017602f78

  • SHA256

    f58cda7508a91f2711f464c780c6ee805d32605414a8812c43cac7c371b6785f

  • SHA512

    eb4ba751ce06f7e0d8002f0dcec5193d4a5e208a13c385fc6938b983f2ca28b9017018cb1b943478cc1d7525b92aa8a273e983180d4896f7351ea7291785515b

  • SSDEEP

    3072:vjr5ELbGnzi+aoljr5ELbGnzi+aoAjr5ELbGnzi+aoDjr5ELbGnzi+aoHjr5ELby:BhXa8hXaHhXaihXaihXaY

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      1be83ef9faa2b8e2b276d8c1022eb3ba_JaffaCakes118

    • Size

      416KB

    • MD5

      1be83ef9faa2b8e2b276d8c1022eb3ba

    • SHA1

      9004d73a00d48631406b105efb3451e017602f78

    • SHA256

      f58cda7508a91f2711f464c780c6ee805d32605414a8812c43cac7c371b6785f

    • SHA512

      eb4ba751ce06f7e0d8002f0dcec5193d4a5e208a13c385fc6938b983f2ca28b9017018cb1b943478cc1d7525b92aa8a273e983180d4896f7351ea7291785515b

    • SSDEEP

      3072:vjr5ELbGnzi+aoljr5ELbGnzi+aoAjr5ELbGnzi+aoDjr5ELbGnzi+aoHjr5ELby:BhXa8hXaHhXaihXaihXaY

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks