Overview

overview

7

Static

static

7

fe730bc858...18.exe

windows7-x64

7

fe730bc858...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fe730bc858536655e573d16e8120f496_JaffaCakes118

  • Size

    124KB

  • Sample

    240421-e8sxhabd43

  • MD5

    fe730bc858536655e573d16e8120f496

  • SHA1

    b1a3285743df7189a8debdb17a5be7bc0ea82ba4

  • SHA256

    e7cb59f5111416a308d4b3855f2c250870dbd9885759f4b5e651ec58ca54a8eb

  • SHA512

    303ea4cb8bd8c16697ce364007de13a356e55442c41e7f85387fa85764a4307f8b99f4ac5cf9f4d3e78793e8702d49cf4866e3f109985090cbc8552fed20298c

  • SSDEEP

    3072:SKcWmjRrz3mmlOzjLmCYPqzXchzSWOjDqxdNS:hGXlOzjLmFPqA4WOjDITS

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      fe730bc858536655e573d16e8120f496_JaffaCakes118

    • Size

      124KB

    • MD5

      fe730bc858536655e573d16e8120f496

    • SHA1

      b1a3285743df7189a8debdb17a5be7bc0ea82ba4

    • SHA256

      e7cb59f5111416a308d4b3855f2c250870dbd9885759f4b5e651ec58ca54a8eb

    • SHA512

      303ea4cb8bd8c16697ce364007de13a356e55442c41e7f85387fa85764a4307f8b99f4ac5cf9f4d3e78793e8702d49cf4866e3f109985090cbc8552fed20298c

    • SSDEEP

      3072:SKcWmjRrz3mmlOzjLmCYPqzXchzSWOjDqxdNS:hGXlOzjLmFPqA4WOjDITS

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks