Overview

overview

7

Static

static

7

4444c931de...18.exe

windows7-x64

7

4444c931de...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4444c931de8190ce8463cd4a296683bc_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240515-dhaskaea8w

  • MD5

    4444c931de8190ce8463cd4a296683bc

  • SHA1

    105ca60574cad4b42d4570cc787b3584c9bb87f7

  • SHA256

    235284fedabfe48b5a2ff0abdc351a3d088ce1bdcf05c8a6ea4b64c9796abb54

  • SHA512

    6bf9355605e8f261ed9aefe5ccbd52792edf0eaa3473a13585041edff1c52e6f74b3b15bd178dc4fae49f5dcd1f11d7ad6e2c6fa7fd65e85af0c7143f5659773

  • SSDEEP

    24576:j0ff/Atv+i1kU9tEG8B4nZDr4x59YUtETgvk2c+fFF78f2yirk:QAtv/fyGDnl8z9YUWwBhr89

Score
7/10
spywarestealerupx

Malware Config

Targets

    • Target

      4444c931de8190ce8463cd4a296683bc_JaffaCakes118

    • Size

      1.2MB

    • MD5

      4444c931de8190ce8463cd4a296683bc

    • SHA1

      105ca60574cad4b42d4570cc787b3584c9bb87f7

    • SHA256

      235284fedabfe48b5a2ff0abdc351a3d088ce1bdcf05c8a6ea4b64c9796abb54

    • SHA512

      6bf9355605e8f261ed9aefe5ccbd52792edf0eaa3473a13585041edff1c52e6f74b3b15bd178dc4fae49f5dcd1f11d7ad6e2c6fa7fd65e85af0c7143f5659773

    • SSDEEP

      24576:j0ff/Atv+i1kU9tEG8B4nZDr4x59YUtETgvk2c+fFF78f2yirk:QAtv/fyGDnl8z9YUWwBhr89

    Score
    7/10
    spywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks