Overview

overview

7

Static

static

3

29db7b72f4...18.exe

windows7-x64

7

29db7b72f4...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    29db7b72f46120a9efe49a9b2d7af4df_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240509-n3xg6sah98

  • MD5

    29db7b72f46120a9efe49a9b2d7af4df

  • SHA1

    c3679a9453688913f7ab14854ec4d027b9f1ed31

  • SHA256

    4f483e0ac032aa347c43c58842fe378dab1a49fef963e034a406a22f6a324e77

  • SHA512

    5c567ce23d3f29957dc6f112263d3c6034654d86d25bc68e8a8dd3ea042c138e99bf086e6097add93121e24ed408de2c1f171ae369b936c801477db0196e1df8

  • SSDEEP

    24576:lOHdyqL0cC+5KLHj9BK2E0hqa1xxgWR4uQ0NpSSj/5Cucn:legqL0cZofq2xqavxtRm0PSSb5on

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      29db7b72f46120a9efe49a9b2d7af4df_JaffaCakes118

    • Size

      1.0MB

    • MD5

      29db7b72f46120a9efe49a9b2d7af4df

    • SHA1

      c3679a9453688913f7ab14854ec4d027b9f1ed31

    • SHA256

      4f483e0ac032aa347c43c58842fe378dab1a49fef963e034a406a22f6a324e77

    • SHA512

      5c567ce23d3f29957dc6f112263d3c6034654d86d25bc68e8a8dd3ea042c138e99bf086e6097add93121e24ed408de2c1f171ae369b936c801477db0196e1df8

    • SSDEEP

      24576:lOHdyqL0cC+5KLHj9BK2E0hqa1xxgWR4uQ0NpSSj/5Cucn:legqL0cZofq2xqavxtRm0PSSb5on

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks