Overview

overview

7

Static

static

3

3548cb3936...18.exe

windows7-x64

7

3548cb3936...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3548cb39364432c15290ac2b6397f58b_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240511-sx6k4sge35

  • MD5

    3548cb39364432c15290ac2b6397f58b

  • SHA1

    6d4a793a83fd3cf8dab01ba06e0fd65e717abb50

  • SHA256

    1ed9bc98bacf5ab0e4e4b5a066608f4ba938418106b8f696e545a9afa5085f95

  • SHA512

    bcee46196f9f66801d7d7f7d39a53573e60a5549718344bd6d8e5c8f358dad614cd7fe6751abaa3e9cffb4c76ce00958f9ac1ba12f2911dea5acbc1fa578d4a0

  • SSDEEP

    24576:+pbo7TyL4sdHEiyUkQ0TekYMAxSpwfu+EtqjXUvdA:+p07TyxdEhpQVGpp6odA

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      3548cb39364432c15290ac2b6397f58b_JaffaCakes118

    • Size

      1.0MB

    • MD5

      3548cb39364432c15290ac2b6397f58b

    • SHA1

      6d4a793a83fd3cf8dab01ba06e0fd65e717abb50

    • SHA256

      1ed9bc98bacf5ab0e4e4b5a066608f4ba938418106b8f696e545a9afa5085f95

    • SHA512

      bcee46196f9f66801d7d7f7d39a53573e60a5549718344bd6d8e5c8f358dad614cd7fe6751abaa3e9cffb4c76ce00958f9ac1ba12f2911dea5acbc1fa578d4a0

    • SSDEEP

      24576:+pbo7TyL4sdHEiyUkQ0TekYMAxSpwfu+EtqjXUvdA:+p07TyxdEhpQVGpp6odA

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks