Overview

overview

7

Static

static

3

0238a7aa71...18.exe

windows7-x64

7

0238a7aa71...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0238a7aa7100bff7a13c07f9e665ecb1_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240427-c3jqjaab6v

  • MD5

    0238a7aa7100bff7a13c07f9e665ecb1

  • SHA1

    df2ecd420982fcdea5d3fa5a3ecad5e5d61916f8

  • SHA256

    7aea8b0b9accc7535faa045854eef47c8ee744f63c76eb1fd8810b8e529c5e80

  • SHA512

    323748042b41b2fbb71e273c7e91d7fbccefa43ca308f90057223e4cf61f2cb1f2a6ded3582b2f0dbd5ac4d89bb228c8afb0aeb6bf0a2a03f86428992b9b0d3d

  • SSDEEP

    24576:TH1igt7/PW+UBgmqXwspWiEkccRvjSqpOoH996V4:bVLO3Omq7pqSIqpOAgV4

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      0238a7aa7100bff7a13c07f9e665ecb1_JaffaCakes118

    • Size

      1.0MB

    • MD5

      0238a7aa7100bff7a13c07f9e665ecb1

    • SHA1

      df2ecd420982fcdea5d3fa5a3ecad5e5d61916f8

    • SHA256

      7aea8b0b9accc7535faa045854eef47c8ee744f63c76eb1fd8810b8e529c5e80

    • SHA512

      323748042b41b2fbb71e273c7e91d7fbccefa43ca308f90057223e4cf61f2cb1f2a6ded3582b2f0dbd5ac4d89bb228c8afb0aeb6bf0a2a03f86428992b9b0d3d

    • SSDEEP

      24576:TH1igt7/PW+UBgmqXwspWiEkccRvjSqpOoH996V4:bVLO3Omq7pqSIqpOAgV4

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks