Overview

overview

10

Static

static

10

088bc418dc...18.exe

windows7-x64

9

088bc418dc...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    088bc418dc9ac21cb8fa82d9f4be63c8_JaffaCakes118

  • Size

    472KB

  • Sample

    240620-wt5fes1bpa

  • MD5

    088bc418dc9ac21cb8fa82d9f4be63c8

  • SHA1

    d2dcea512b4c6422e6f186db02b12535a79e94e7

  • SHA256

    0bf1ddf56a66d3347f0b8c768d4369229deb8a1cbf0b7aeab1694d29c715977d

  • SHA512

    00a6d09518f98859eb863c3e52b16d67363421d1030ea08a2744576c4d2ea0ea24424875f65acf11f0431221fcb9ad9494b2bde05b02904fed40be915c25ae79

  • SSDEEP

    12288:mU6q8J+5AVXux15EAtorfZiSDL4qMOt7/5zBx9iF/HjYF:EB6UXux1ZtmfZiSDs+tVzBx9ixE

Score
10/10
collectionspywarestealerupx

Malware Config

Targets

    • Target

      088bc418dc9ac21cb8fa82d9f4be63c8_JaffaCakes118

    • Size

      472KB

    • MD5

      088bc418dc9ac21cb8fa82d9f4be63c8

    • SHA1

      d2dcea512b4c6422e6f186db02b12535a79e94e7

    • SHA256

      0bf1ddf56a66d3347f0b8c768d4369229deb8a1cbf0b7aeab1694d29c715977d

    • SHA512

      00a6d09518f98859eb863c3e52b16d67363421d1030ea08a2744576c4d2ea0ea24424875f65acf11f0431221fcb9ad9494b2bde05b02904fed40be915c25ae79

    • SSDEEP

      12288:mU6q8J+5AVXux15EAtorfZiSDL4qMOt7/5zBx9iF/HjYF:EB6UXux1ZtmfZiSDs+tVzBx9ixE

    Score
    9/10
    collectionspywarestealerupx

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • NirSoft WebBrowserPassView

      Password recovery tool for various web browsers

    • Nirsoft

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Accesses Microsoft Outlook accounts

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks