Overview

overview

7

Static

static

7

e75a8c4593...18.exe

windows7-x64

7

e75a8c4593...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e75a8c45932d78045c80dc39519ac563_JaffaCakes118

  • Size

    126KB

  • Sample

    240408-nlfs4aga48

  • MD5

    e75a8c45932d78045c80dc39519ac563

  • SHA1

    3ed5646ed7ced164da899365ff0315e77d8f20ee

  • SHA256

    fbee97a750570f256f5b6bebd2eeb2c18a82cff949c26bcb6f9a4be49d4abf62

  • SHA512

    573f736d33d82cbfe2c2ef53341b0be05cadd7d17b5fa6cff82e2c6dc2e0b29a980b8336587e3868fb0945578b160d1293646877cc80f013513df933c11cf425

  • SSDEEP

    3072:SKcWmjRrz3ZKcWmjRrz3LAo27wsQ6VHAIoXf9iRN:hGyGsFW61t2MN

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      e75a8c45932d78045c80dc39519ac563_JaffaCakes118

    • Size

      126KB

    • MD5

      e75a8c45932d78045c80dc39519ac563

    • SHA1

      3ed5646ed7ced164da899365ff0315e77d8f20ee

    • SHA256

      fbee97a750570f256f5b6bebd2eeb2c18a82cff949c26bcb6f9a4be49d4abf62

    • SHA512

      573f736d33d82cbfe2c2ef53341b0be05cadd7d17b5fa6cff82e2c6dc2e0b29a980b8336587e3868fb0945578b160d1293646877cc80f013513df933c11cf425

    • SSDEEP

      3072:SKcWmjRrz3ZKcWmjRrz3LAo27wsQ6VHAIoXf9iRN:hGyGsFW61t2MN

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks