Overview

overview

7

Static

static

3

2ed26ab0d6...18.exe

windows7-x64

7

2ed26ab0d6...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ed26ab0d6fe202a19d0e327d7fba8fe_JaffaCakes118

  • Size

    639KB

  • Sample

    240709-dwswastejl

  • MD5

    2ed26ab0d6fe202a19d0e327d7fba8fe

  • SHA1

    33c8e27c2f536933fcec98002f00edadc45fe692

  • SHA256

    17bd296e1e548338209e27bb80f5a679dd88915022ce8d96363930ed71e431d0

  • SHA512

    d834cac0157d6ea96c7e0c3908c26391d26b6a20122aa15d301d642a7818d56b7023b8d7473386d280deb2f43f2b28577883ac1cf0571c82a2f5a9f441592689

  • SSDEEP

    12288:oiaWbWxrYcOgLAxB7iX/IH2wfR9e3nOLdypJPONcgyvK9aLP1d9//h:oUCduvxB7ivwjfR96nHpJPJQaLv9/Z

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      2ed26ab0d6fe202a19d0e327d7fba8fe_JaffaCakes118

    • Size

      639KB

    • MD5

      2ed26ab0d6fe202a19d0e327d7fba8fe

    • SHA1

      33c8e27c2f536933fcec98002f00edadc45fe692

    • SHA256

      17bd296e1e548338209e27bb80f5a679dd88915022ce8d96363930ed71e431d0

    • SHA512

      d834cac0157d6ea96c7e0c3908c26391d26b6a20122aa15d301d642a7818d56b7023b8d7473386d280deb2f43f2b28577883ac1cf0571c82a2f5a9f441592689

    • SSDEEP

      12288:oiaWbWxrYcOgLAxB7iX/IH2wfR9e3nOLdypJPONcgyvK9aLP1d9//h:oUCduvxB7ivwjfR96nHpJPJQaLv9/Z

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks