Overview

overview

10

Static

static

3

0f31c15f68...18.exe

windows7-x64

10

0f31c15f68...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f31c15f68f9bf7acd95d4808990f11c_JaffaCakes118

  • Size

    172KB

  • Sample

    240625-xtklpaxdjc

  • MD5

    0f31c15f68f9bf7acd95d4808990f11c

  • SHA1

    d535c67a6938c2baef9a2e495bceb0f71c762622

  • SHA256

    6161fdcd2661f9efc02f4a59e8f3ef25853d6a10b618e9acca6d0a5cb9a3e70d

  • SHA512

    aa726e1fd1baa8cc8e774b2be9ef99174d176dc76737134e08449b152e1fe6f9baa8f87eacd25877326545169d70b6918b387aabddb3bbb1c6e9e7471cd2b575

  • SSDEEP

    3072:IUWU+9KHAF7i873mvGgUrjjC27P1mPqcdw2f1M+S3oMdT//0cYdL7yetlp:nWUWKgV3WJqb7PMHdpEoMdYFvJtr

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      0f31c15f68f9bf7acd95d4808990f11c_JaffaCakes118

    • Size

      172KB

    • MD5

      0f31c15f68f9bf7acd95d4808990f11c

    • SHA1

      d535c67a6938c2baef9a2e495bceb0f71c762622

    • SHA256

      6161fdcd2661f9efc02f4a59e8f3ef25853d6a10b618e9acca6d0a5cb9a3e70d

    • SHA512

      aa726e1fd1baa8cc8e774b2be9ef99174d176dc76737134e08449b152e1fe6f9baa8f87eacd25877326545169d70b6918b387aabddb3bbb1c6e9e7471cd2b575

    • SSDEEP

      3072:IUWU+9KHAF7i873mvGgUrjjC27P1mPqcdw2f1M+S3oMdT//0cYdL7yetlp:nWUWKgV3WJqb7PMHdpEoMdYFvJtr

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks