Overview

overview

7

Static

static

3

043f979248...18.exe

windows7-x64

7

043f979248...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    043f979248ab92c86091e4a5d33b4b8c_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240428-dp7qwafb6t

  • MD5

    043f979248ab92c86091e4a5d33b4b8c

  • SHA1

    58c55f2a5ed700444934d3520984f425b858b596

  • SHA256

    bd74e0da3edebaa2c46eec090f3383c51dd2a533d1ad893cd81f29f593331a44

  • SHA512

    a2e76150059bc3312e584b4880c3b4d05636311794ee5d6f0b9cb87bee82aaa3b97a99b0687ad75ff4aff516765f57db3593fef4a70ee6c8addd6d4a56457ccd

  • SSDEEP

    24576:HmOR2/81y4ELxHYpliDmTjVRJ1hVQK8mJLn95odx3tO:H1yxGniDSRJ1oK809WdBtO

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      043f979248ab92c86091e4a5d33b4b8c_JaffaCakes118

    • Size

      1.0MB

    • MD5

      043f979248ab92c86091e4a5d33b4b8c

    • SHA1

      58c55f2a5ed700444934d3520984f425b858b596

    • SHA256

      bd74e0da3edebaa2c46eec090f3383c51dd2a533d1ad893cd81f29f593331a44

    • SHA512

      a2e76150059bc3312e584b4880c3b4d05636311794ee5d6f0b9cb87bee82aaa3b97a99b0687ad75ff4aff516765f57db3593fef4a70ee6c8addd6d4a56457ccd

    • SSDEEP

      24576:HmOR2/81y4ELxHYpliDmTjVRJ1hVQK8mJLn95odx3tO:H1yxGniDSRJ1oK809WdBtO

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks