Overview

overview

7

Static

static

3

eb8b95aca2...18.exe

windows7-x64

7

eb8b95aca2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb8b95aca2c42070449ef7aa588d9c1f_JaffaCakes118

  • Size

    684KB

  • Sample

    240410-vexatsed36

  • MD5

    eb8b95aca2c42070449ef7aa588d9c1f

  • SHA1

    03daa7334345bfe9483b6580e16d93cd4db56515

  • SHA256

    69041f1677e94e67c5e73aec08a504b491db974975a3ab9f11e378d11dbc5ae2

  • SHA512

    9eba64ce595117617134d18e80c68bb66d06197631e749959f0f4520c5287ffa808b2ad55b0a10879c57b158ad6913d28a0e3c377be08a191cc7f71883a687ac

  • SSDEEP

    6144:20PEtTPkAuAfjlJuj3QjgJ6snJZ/RjY07qVyLOyFTzVxh3VAitO8yb8D/3/o7N7P:20m3blK36QhuIOyFHxlAaO8ye3/iE

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      eb8b95aca2c42070449ef7aa588d9c1f_JaffaCakes118

    • Size

      684KB

    • MD5

      eb8b95aca2c42070449ef7aa588d9c1f

    • SHA1

      03daa7334345bfe9483b6580e16d93cd4db56515

    • SHA256

      69041f1677e94e67c5e73aec08a504b491db974975a3ab9f11e378d11dbc5ae2

    • SHA512

      9eba64ce595117617134d18e80c68bb66d06197631e749959f0f4520c5287ffa808b2ad55b0a10879c57b158ad6913d28a0e3c377be08a191cc7f71883a687ac

    • SSDEEP

      6144:20PEtTPkAuAfjlJuj3QjgJ6snJZ/RjY07qVyLOyFTzVxh3VAitO8yb8D/3/o7N7P:20m3blK36QhuIOyFHxlAaO8ye3/iE

    Score
    7/10
    spywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks