Overview

overview

7

Static

static

7

f9adbf9983...18.exe

windows7-x64

7

f9adbf9983...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f9adbf9983d12ebb0bb7faa21f29fb86_JaffaCakes118

  • Size

    285KB

  • Sample

    240419-g1nnxsag24

  • MD5

    f9adbf9983d12ebb0bb7faa21f29fb86

  • SHA1

    b3a7937cdd911a6986a12f5865e958136ddce007

  • SHA256

    3d0153a9835e0f92c123a0088f5209a8a57f9e1f90f58f2bbb9e7175a21f8246

  • SHA512

    500d8ca2fbc28b1c13546e2ec80d319ed101c37398e4e847e6f221097e7b22945dad58d73bfe7ed317ea6c1189fd8c87e3d48e50aa6f6170f2c601c0b6465a2c

  • SSDEEP

    6144:S7ngJXgOxXcfvhYIbZAqU/Cifj0p5YJZSjeMgddz9:STgjxXKKaZf9pSJgjjgn9

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      f9adbf9983d12ebb0bb7faa21f29fb86_JaffaCakes118

    • Size

      285KB

    • MD5

      f9adbf9983d12ebb0bb7faa21f29fb86

    • SHA1

      b3a7937cdd911a6986a12f5865e958136ddce007

    • SHA256

      3d0153a9835e0f92c123a0088f5209a8a57f9e1f90f58f2bbb9e7175a21f8246

    • SHA512

      500d8ca2fbc28b1c13546e2ec80d319ed101c37398e4e847e6f221097e7b22945dad58d73bfe7ed317ea6c1189fd8c87e3d48e50aa6f6170f2c601c0b6465a2c

    • SSDEEP

      6144:S7ngJXgOxXcfvhYIbZAqU/Cifj0p5YJZSjeMgddz9:STgjxXKKaZf9pSJgjjgn9

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks