Overview

overview

7

Static

static

3

fb678a7935...18.exe

windows7-x64

7

fb678a7935...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb678a79355d23b156553e9ea937fc2f_JaffaCakes118

  • Size

    67KB

  • Sample

    240419-3fbdraac57

  • MD5

    fb678a79355d23b156553e9ea937fc2f

  • SHA1

    5ed6e35cd595de13316161b18cdc0dc7884d02b4

  • SHA256

    f4177013283d3ece8d2453a5e0a84612c5ce14d5fba58b4c90296b5a9ff697c4

  • SHA512

    197caa687401b9014421d0909504d5c5e5f176f352622b8a8964c053c7855db8c9c40d182d031146fe64e3e1740b5c7537ed813d5adb92458b1e21914de5082f

  • SSDEEP

    1536:p4q8Q1xZtffrb8sjPFNhTYsFFrzckH2fmitl4u:qKtfDwsjPThTYszDH2fDt

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      fb678a79355d23b156553e9ea937fc2f_JaffaCakes118

    • Size

      67KB

    • MD5

      fb678a79355d23b156553e9ea937fc2f

    • SHA1

      5ed6e35cd595de13316161b18cdc0dc7884d02b4

    • SHA256

      f4177013283d3ece8d2453a5e0a84612c5ce14d5fba58b4c90296b5a9ff697c4

    • SHA512

      197caa687401b9014421d0909504d5c5e5f176f352622b8a8964c053c7855db8c9c40d182d031146fe64e3e1740b5c7537ed813d5adb92458b1e21914de5082f

    • SSDEEP

      1536:p4q8Q1xZtffrb8sjPFNhTYsFFrzckH2fmitl4u:qKtfDwsjPThTYszDH2fDt

    Score
    7/10
    spywarestealer

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks