Overview

overview

7

Static

static

7

09a4d05a2a...18.dll

windows7-x64

7

09a4d05a2a...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    09a4d05a2a42191f93c0f78a92b766e3_JaffaCakes118

  • Size

    548KB

  • Sample

    240624-t5nwpssbrg

  • MD5

    09a4d05a2a42191f93c0f78a92b766e3

  • SHA1

    086a836c6c3a06fa6246fa4532f8d0b647e1e40b

  • SHA256

    13815a2db1aef308f2be66b674a9c3dd166390ead36a4aea6707aa2a2d79cd96

  • SHA512

    e5d30c46207118edb786e251869bd5e9bd87e63433a76febbc01332beb0e888c388e89ce48daa552a1b3b10c8ace802e72ad114f225c227a4bb96449429cbcf2

  • SSDEEP

    12288:b64aIkqLJ6ajedvbHAimByOtm5O+PVLURYkiEWvfoS:b6iZ6VjCp+PayoW

Score
7/10
discoveryspywarestealerupx

Malware Config

Targets

    • Target

      09a4d05a2a42191f93c0f78a92b766e3_JaffaCakes118

    • Size

      548KB

    • MD5

      09a4d05a2a42191f93c0f78a92b766e3

    • SHA1

      086a836c6c3a06fa6246fa4532f8d0b647e1e40b

    • SHA256

      13815a2db1aef308f2be66b674a9c3dd166390ead36a4aea6707aa2a2d79cd96

    • SHA512

      e5d30c46207118edb786e251869bd5e9bd87e63433a76febbc01332beb0e888c388e89ce48daa552a1b3b10c8ace802e72ad114f225c227a4bb96449429cbcf2

    • SSDEEP

      12288:b64aIkqLJ6ajedvbHAimByOtm5O+PVLURYkiEWvfoS:b6iZ6VjCp+PayoW

    Score
    7/10
    discoveryspywarestealerupx

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks