Overview

overview

7

Static

static

3

0494a2bc6f...18.exe

windows7-x64

7

0494a2bc6f...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0494a2bc6f6b41cdf454b43672e8b3d2_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240428-hb1smaab49

  • MD5

    0494a2bc6f6b41cdf454b43672e8b3d2

  • SHA1

    f4b36636be1a72438b987f4776b22992d849ae6c

  • SHA256

    c981ea84b4a400b3324bf83d8b8a5db147cf8f6d02cf693520c4f38e1550c726

  • SHA512

    46a111f564d1436de77d144c498cb507a18850b2e4593423ab5b0e7603521472d5044b69b12e9ea69cd06b13fc3b0dbcd60fc897fdc2a36e220d19c73c06856a

  • SSDEEP

    24576:Vnk45sTSXjL/3ELQxVgoyUirctAsEp5Q6XJlhrQd:VzsTSXX8QcoRGcCZXjJl0

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      0494a2bc6f6b41cdf454b43672e8b3d2_JaffaCakes118

    • Size

      1.1MB

    • MD5

      0494a2bc6f6b41cdf454b43672e8b3d2

    • SHA1

      f4b36636be1a72438b987f4776b22992d849ae6c

    • SHA256

      c981ea84b4a400b3324bf83d8b8a5db147cf8f6d02cf693520c4f38e1550c726

    • SHA512

      46a111f564d1436de77d144c498cb507a18850b2e4593423ab5b0e7603521472d5044b69b12e9ea69cd06b13fc3b0dbcd60fc897fdc2a36e220d19c73c06856a

    • SSDEEP

      24576:Vnk45sTSXjL/3ELQxVgoyUirctAsEp5Q6XJlhrQd:VzsTSXX8QcoRGcCZXjJl0

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks