Overview

overview

7

Static

static

3

f4d0fae97e...18.exe

windows7-x64

7

f4d0fae97e...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f4d0fae97eaf4e174261a3f0fef81876_JaffaCakes118

  • Size

    636KB

  • Sample

    240417-cnp9rsce3z

  • MD5

    f4d0fae97eaf4e174261a3f0fef81876

  • SHA1

    3fd8c53cd6f39c2bdfd5971979243a4a29aad3b5

  • SHA256

    54191f3709c601d7e5490e3716702637c3e76736a189ce316e4861abcde8b5e5

  • SHA512

    26ed5c057d2283ea4ccbbe46180c4cff1cfc61f6568b5ff64410dfbd3d36131d83421ee9ec629cb7fb3db89e1bd60f457fe84da30dd7b1bd94a81456adc3bb01

  • SSDEEP

    12288:kznRrCVcXKYRUhmtLgL0cMp3aZmNNSONUf+EBhUC6A4gdDql6UzwsUQHy:kF16uOaLq0ZCONDwhU++EyS

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      f4d0fae97eaf4e174261a3f0fef81876_JaffaCakes118

    • Size

      636KB

    • MD5

      f4d0fae97eaf4e174261a3f0fef81876

    • SHA1

      3fd8c53cd6f39c2bdfd5971979243a4a29aad3b5

    • SHA256

      54191f3709c601d7e5490e3716702637c3e76736a189ce316e4861abcde8b5e5

    • SHA512

      26ed5c057d2283ea4ccbbe46180c4cff1cfc61f6568b5ff64410dfbd3d36131d83421ee9ec629cb7fb3db89e1bd60f457fe84da30dd7b1bd94a81456adc3bb01

    • SSDEEP

      12288:kznRrCVcXKYRUhmtLgL0cMp3aZmNNSONUf+EBhUC6A4gdDql6UzwsUQHy:kF16uOaLq0ZCONDwhU++EyS

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks