Overview

overview

10

Static

static

3

28525c7a32...18.exe

windows7-x64

10

28525c7a32...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    28525c7a32166d7ef4be77cbbce21218_JaffaCakes118

  • Size

    185KB

  • Sample

    240706-m54htszcqe

  • MD5

    28525c7a32166d7ef4be77cbbce21218

  • SHA1

    6b2382ef49bd64a9b544d8040d8cc34eefd7e533

  • SHA256

    2ef837041acb3666ad3392204b7886e69423dc212f46659ad67bc152f44c54f0

  • SHA512

    9b284bd41e5d1179e43d3424b1db1de60a5703bc604fd51b82827891ca9b8f3c0c5e2535cbe3691c0b77b46ae54ceb2278ae30fc7acebc9d2f481b6ae6dbe202

  • SSDEEP

    3072:kLHECeIdBbtve6obdue87pXuLEupwb4DNyWRPNVKNnd5gSzXx9D2W1plcnV2SCU:ELVneJUpUx6biLPNYNn/zxZzplcnhC5

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      28525c7a32166d7ef4be77cbbce21218_JaffaCakes118

    • Size

      185KB

    • MD5

      28525c7a32166d7ef4be77cbbce21218

    • SHA1

      6b2382ef49bd64a9b544d8040d8cc34eefd7e533

    • SHA256

      2ef837041acb3666ad3392204b7886e69423dc212f46659ad67bc152f44c54f0

    • SHA512

      9b284bd41e5d1179e43d3424b1db1de60a5703bc604fd51b82827891ca9b8f3c0c5e2535cbe3691c0b77b46ae54ceb2278ae30fc7acebc9d2f481b6ae6dbe202

    • SSDEEP

      3072:kLHECeIdBbtve6obdue87pXuLEupwb4DNyWRPNVKNnd5gSzXx9D2W1plcnV2SCU:ELVneJUpUx6biLPNYNn/zxZzplcnhC5

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks