Overview

overview

7

Static

static

7

ea6b0c0517...18.exe

windows7-x64

7

ea6b0c0517...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ea6b0c051796df8291ed30eca274b44a_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240409-tyjneacc74

  • MD5

    ea6b0c051796df8291ed30eca274b44a

  • SHA1

    3906b5a2ee6cda95788004b79c2b80b69eaa10d2

  • SHA256

    13fb912ddb5d1fc04f4197b2bfa0d1b00f7291a06b37fe8f3c2bfb48d1628354

  • SHA512

    17f68d48714dd071433814aee554530858c067a020417d75ed6c01a312fee1561f7ad27fb72dbea154d7fde82e9a93dc8fc943f36142e45a0277f3d57c84f25b

  • SSDEEP

    24576:QFE//Tct4bOstqXl2AV5eUMP9WpaXC0821/c9vntig//jHPZ9HY+Wg:ySVtqUAV5eUMPApay08Ic5tigHjHPRWg

Score
7/10
spywarestealerupx

Malware Config

Targets

    • Target

      ea6b0c051796df8291ed30eca274b44a_JaffaCakes118

    • Size

      1.2MB

    • MD5

      ea6b0c051796df8291ed30eca274b44a

    • SHA1

      3906b5a2ee6cda95788004b79c2b80b69eaa10d2

    • SHA256

      13fb912ddb5d1fc04f4197b2bfa0d1b00f7291a06b37fe8f3c2bfb48d1628354

    • SHA512

      17f68d48714dd071433814aee554530858c067a020417d75ed6c01a312fee1561f7ad27fb72dbea154d7fde82e9a93dc8fc943f36142e45a0277f3d57c84f25b

    • SSDEEP

      24576:QFE//Tct4bOstqXl2AV5eUMP9WpaXC0821/c9vntig//jHPZ9HY+Wg:ySVtqUAV5eUMPApay08Ic5tigHjHPRWg

    Score
    7/10
    spywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks