Overview

overview

7

Static

static

3

6e7bc49b91...18.exe

windows7-x64

7

6e7bc49b91...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e7bc49b91419790ae05bb2892f87481_JaffaCakes118

  • Size

    3.1MB

  • Sample

    240524-pefeesac9t

  • MD5

    6e7bc49b91419790ae05bb2892f87481

  • SHA1

    5332c21a808a432bb118a19b8f5123e70ba313c0

  • SHA256

    78c3e8ab0454feee3413e08cfe00a7349e058e3432e2ad2c5927f441a78ac3d7

  • SHA512

    7f4530a7f52f9d7bc67e5919f8c4da500d13465e09a9e46936b835709af91e1fe7cab7a63a5f62f13d6882bb93b9ea897193e886c74a3e50b6bf1efd757efd87

  • SSDEEP

    49152:G7lHuYZXHgB6dk6agmUWUpChfWUTr/n85q7YV7crwIr2BioEm63QiKvyGaLKOQ:G7lO63g8DagSUMhOUTj8YIAVr2LAMuuX

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      6e7bc49b91419790ae05bb2892f87481_JaffaCakes118

    • Size

      3.1MB

    • MD5

      6e7bc49b91419790ae05bb2892f87481

    • SHA1

      5332c21a808a432bb118a19b8f5123e70ba313c0

    • SHA256

      78c3e8ab0454feee3413e08cfe00a7349e058e3432e2ad2c5927f441a78ac3d7

    • SHA512

      7f4530a7f52f9d7bc67e5919f8c4da500d13465e09a9e46936b835709af91e1fe7cab7a63a5f62f13d6882bb93b9ea897193e886c74a3e50b6bf1efd757efd87

    • SSDEEP

      49152:G7lHuYZXHgB6dk6agmUWUpChfWUTr/n85q7YV7crwIr2BioEm63QiKvyGaLKOQ:G7lO63g8DagSUMhOUTj8YIAVr2LAMuuX

    Score
    7/10
    spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks