Overview

overview

7

Static

static

3

f6fb9c27e5...18.exe

windows7-x64

7

f6fb9c27e5...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6fb9c27e5185fb55db48e4e80cb343a_JaffaCakes118

  • Size

    50KB

  • Sample

    240418-bn2r5agb9t

  • MD5

    f6fb9c27e5185fb55db48e4e80cb343a

  • SHA1

    149c1f7a4902141562dbd6f374b53d527be72af6

  • SHA256

    54c377cb790b0f648cc5085f77e90be85295d50c1545b32813e3f820a86b71c2

  • SHA512

    93eb9c390a7787ca2e752eb665da181172f5632281cab6a2e7f4465aa4e7a3b6b288bffe881268466aa8301833b25a460395d40eee0d4ca293e6c11feb47f940

  • SSDEEP

    768:etf9cmxzmIeu+Bjs3ax4DsE/FmpI6VtITnhfO8lkChFK6yVx2HAR9t7sig5:etfmMzmIefBjs3KDkm4hmOkChKmAGi

Score
7/10
collectiondiscoveryspywarestealer

Malware Config

Targets

    • Target

      f6fb9c27e5185fb55db48e4e80cb343a_JaffaCakes118

    • Size

      50KB

    • MD5

      f6fb9c27e5185fb55db48e4e80cb343a

    • SHA1

      149c1f7a4902141562dbd6f374b53d527be72af6

    • SHA256

      54c377cb790b0f648cc5085f77e90be85295d50c1545b32813e3f820a86b71c2

    • SHA512

      93eb9c390a7787ca2e752eb665da181172f5632281cab6a2e7f4465aa4e7a3b6b288bffe881268466aa8301833b25a460395d40eee0d4ca293e6c11feb47f940

    • SSDEEP

      768:etf9cmxzmIeu+Bjs3ax4DsE/FmpI6VtITnhfO8lkChFK6yVx2HAR9t7sig5:etfmMzmIefBjs3KDkm4hmOkChKmAGi

    Score
    7/10
    collectiondiscoveryspywarestealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

2
T1552

Credentials In Files

2
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

2
T1005

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks