Overview

overview

7

Static

static

7

f876b46999...18.exe

windows7-x64

7

f876b46999...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f876b46999107423733c5fdd244d710b_JaffaCakes118

  • Size

    46KB

  • Sample

    240418-v9w9babg5w

  • MD5

    f876b46999107423733c5fdd244d710b

  • SHA1

    2f33c4497f32dd069f41a0be0654326a8c99deb4

  • SHA256

    d06ffce4cc09b64c5902013e5941be8f7d969112d76c93a8247a3f64b65a0dfc

  • SHA512

    b2e45b52d1c158929ebcfc8206e77f6ee77d30f4bdac0116d6df478a2e1eaf70053dcb7f0d5cdb890b0275c2f9321ca3ec8b9ab93c98503d4cf9be8a841e9a66

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFB6TB2d6M9uQ1wi05H9C:SKcR4mjD9r823FB612dN97B05fyB

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      f876b46999107423733c5fdd244d710b_JaffaCakes118

    • Size

      46KB

    • MD5

      f876b46999107423733c5fdd244d710b

    • SHA1

      2f33c4497f32dd069f41a0be0654326a8c99deb4

    • SHA256

      d06ffce4cc09b64c5902013e5941be8f7d969112d76c93a8247a3f64b65a0dfc

    • SHA512

      b2e45b52d1c158929ebcfc8206e77f6ee77d30f4bdac0116d6df478a2e1eaf70053dcb7f0d5cdb890b0275c2f9321ca3ec8b9ab93c98503d4cf9be8a841e9a66

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFB6TB2d6M9uQ1wi05H9C:SKcR4mjD9r823FB612dN97B05fyB

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks