5ccd345d5037adcd28fb74f5574d9801461affea95d4462667fc52a56ddb15de | Triage

Sharing

General

Target

215a3833a4ef5a53da9b2e6018aa7db7_JaffaCakes118
Size

410KB
Sample

240703-g1w1asvdkr
MD5

215a3833a4ef5a53da9b2e6018aa7db7
SHA1

60280259a0c3c73ed1c8d8cbabb0f6b29edd4e59
SHA256

5ccd345d5037adcd28fb74f5574d9801461affea95d4462667fc52a56ddb15de
SHA512

c882503cc2443d71e28c64b9bcf11770667e547ac4f060605a18d86ae39cb74672e170e3f57aec77c9f63174c334c49c5031c024e9d542124106fe38a12ea2f8
SSDEEP

12288:trbE+GS1l/g8iGotqUgsHwPESVXXrsWNQ5:trQdulvX9hVnrFN

Score

7^/10

persistence spyware stealer upx

Malware Config

Targets

- Target
  
  215a3833a4ef5a53da9b2e6018aa7db7_JaffaCakes118
- Size
  
  410KB
- MD5
  
  215a3833a4ef5a53da9b2e6018aa7db7
- SHA1
  
  60280259a0c3c73ed1c8d8cbabb0f6b29edd4e59
- SHA256
  
  5ccd345d5037adcd28fb74f5574d9801461affea95d4462667fc52a56ddb15de
- SHA512
  
  c882503cc2443d71e28c64b9bcf11770667e547ac4f060605a18d86ae39cb74672e170e3f57aec77c9f63174c334c49c5031c024e9d542124106fe38a12ea2f8
- SSDEEP
  
  12288:trbE+GS1l/g8iGotqUgsHwPESVXXrsWNQ5:trQdulvX9hVnrFN
Score

7^/10

persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2