Overview

overview

10

Static

static

3

f3e23b6b63...18.exe

windows7-x64

10

f3e23b6b63...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f3e23b6b634b55f910f539abdf420e18_JaffaCakes118

  • Size

    165KB

  • Sample

    240416-t531mafa37

  • MD5

    f3e23b6b634b55f910f539abdf420e18

  • SHA1

    1dd394d0891dbc312461e95e9868acc71c323f51

  • SHA256

    c2a2815c3e91975d524eab022dcac4f62b0149150c8c0c8cb0dbde7140dca622

  • SHA512

    97785facc60a341de9db3968cbe042c5583d472035b0b39c4819962875ba80873e6aaafeb96636a22af4e276ed1976830a2185a1a514cd64cfcc0963522d67f0

  • SSDEEP

    3072:eqkoO5TNvZrUnCriPcdRWHsTmt3fG2p+GQGvoy0JN75PyQQgvZy:eqZWTNZrCJPcd4HsTPh75aF

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      f3e23b6b634b55f910f539abdf420e18_JaffaCakes118

    • Size

      165KB

    • MD5

      f3e23b6b634b55f910f539abdf420e18

    • SHA1

      1dd394d0891dbc312461e95e9868acc71c323f51

    • SHA256

      c2a2815c3e91975d524eab022dcac4f62b0149150c8c0c8cb0dbde7140dca622

    • SHA512

      97785facc60a341de9db3968cbe042c5583d472035b0b39c4819962875ba80873e6aaafeb96636a22af4e276ed1976830a2185a1a514cd64cfcc0963522d67f0

    • SSDEEP

      3072:eqkoO5TNvZrUnCriPcdRWHsTmt3fG2p+GQGvoy0JN75PyQQgvZy:eqZWTNZrCJPcd4HsTPh75aF

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks