Overview

overview

7

Static

static

7

fd4186aaed...18.exe

windows7-x64

7

fd4186aaed...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd4186aaed68f3fb2aa672a2c7c1bd57_JaffaCakes118

  • Size

    30KB

  • Sample

    240420-v3gv2sdf97

  • MD5

    fd4186aaed68f3fb2aa672a2c7c1bd57

  • SHA1

    e65ca6fd129f778627401936fa0b16a93eea541b

  • SHA256

    d38b071c479bc07ac3f10ed786cb6c46a757a56b3bd73e5e1262b8a63443cdb0

  • SHA512

    d38347ef3f79461e7f8c509096942ccba8ababdc08453f787c6c54c727ea60df34846e97989bd46b15020af19c4d06b1465920a0c5810f15c107aba31e4a53aa

  • SSDEEP

    768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFp2:SKcR4mjD9r823Fp2

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      fd4186aaed68f3fb2aa672a2c7c1bd57_JaffaCakes118

    • Size

      30KB

    • MD5

      fd4186aaed68f3fb2aa672a2c7c1bd57

    • SHA1

      e65ca6fd129f778627401936fa0b16a93eea541b

    • SHA256

      d38b071c479bc07ac3f10ed786cb6c46a757a56b3bd73e5e1262b8a63443cdb0

    • SHA512

      d38347ef3f79461e7f8c509096942ccba8ababdc08453f787c6c54c727ea60df34846e97989bd46b15020af19c4d06b1465920a0c5810f15c107aba31e4a53aa

    • SSDEEP

      768:XocAX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIocVSEFp2:SKcR4mjD9r823Fp2

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks