Overview

overview

8

Static

static

3

eb6077d51d...18.exe

windows7-x64

8

eb6077d51d...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb6077d51dcfbef883bbc0eca60d9249_JaffaCakes118

  • Size

    340KB

  • Sample

    240410-ssnjqsfg6t

  • MD5

    eb6077d51dcfbef883bbc0eca60d9249

  • SHA1

    023031e9308677f9a97f94ad8b38bfb4283d7da5

  • SHA256

    e860eaa381f9a67604b29d4cb5c017f381b11d231e36dbc7b98b1ee6417412b2

  • SHA512

    f639a9adc8972fa777a5160f66eee8f2a31c7c75753150491c9730beeff341b85440fd1c1ec09d7fdf630d9d288a354fb7ea0392a693b58e974880ad1a7ba273

  • SSDEEP

    6144:62EUuzB3Us09UoF8um5N5losgZ9j76s4H8BlHvy8kI9faCXfMT:mUrsqUoahJGsUl76s4QlHvXkknX

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      eb6077d51dcfbef883bbc0eca60d9249_JaffaCakes118

    • Size

      340KB

    • MD5

      eb6077d51dcfbef883bbc0eca60d9249

    • SHA1

      023031e9308677f9a97f94ad8b38bfb4283d7da5

    • SHA256

      e860eaa381f9a67604b29d4cb5c017f381b11d231e36dbc7b98b1ee6417412b2

    • SHA512

      f639a9adc8972fa777a5160f66eee8f2a31c7c75753150491c9730beeff341b85440fd1c1ec09d7fdf630d9d288a354fb7ea0392a693b58e974880ad1a7ba273

    • SSDEEP

      6144:62EUuzB3Us09UoF8um5N5losgZ9j76s4H8BlHvy8kI9faCXfMT:mUrsqUoahJGsUl76s4QlHvXkknX

    Score
    8/10
    evasionpersistencespywarestealer

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks