Overview

overview

10

Static

static

7

f382924e19...18.exe

windows7-x64

10

f382924e19...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f382924e19db394e90d932fcf734d857_JaffaCakes118

  • Size

    49KB

  • Sample

    240416-pskw3aad86

  • MD5

    f382924e19db394e90d932fcf734d857

  • SHA1

    7dbfc51a31bdfb9ce0aa03ba78892ce8562afe91

  • SHA256

    4ec2fab87341dccecf45fddf7d14465ebb2ba64de8d7c17d603f00dd6853ee36

  • SHA512

    ae9bf261581e84506744b794d9645bbf54ec194c58bd55ec1c0f7d7a749c5ea7b4a8d3d855dd3fb33f1c713a5afd11925ac213ab9eea4468e79817ebf76b381e

  • SSDEEP

    1536:j7GuNur7FJ/WlkAyQqizdPx+W/4laStTHa74Rd21AfNu:XQr7FUlkAyQqiz+W/4laStmgs1gNu

Score
10/10
evasionspywarestealerupx

Malware Config

Targets

    • Target

      f382924e19db394e90d932fcf734d857_JaffaCakes118

    • Size

      49KB

    • MD5

      f382924e19db394e90d932fcf734d857

    • SHA1

      7dbfc51a31bdfb9ce0aa03ba78892ce8562afe91

    • SHA256

      4ec2fab87341dccecf45fddf7d14465ebb2ba64de8d7c17d603f00dd6853ee36

    • SHA512

      ae9bf261581e84506744b794d9645bbf54ec194c58bd55ec1c0f7d7a749c5ea7b4a8d3d855dd3fb33f1c713a5afd11925ac213ab9eea4468e79817ebf76b381e

    • SSDEEP

      1536:j7GuNur7FJ/WlkAyQqizdPx+W/4laStTHa74Rd21AfNu:XQr7FUlkAyQqiz+W/4laStmgs1gNu

    Score
    10/10
    evasionspywarestealerupx

    • Modifies firewall policy service

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks