Overview

overview

7

Static

static

3

2f20133f65...18.exe

windows7-x64

7

2f20133f65...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2f20133f655b7b8d83c7fccf564a61b6_JaffaCakes118

  • Size

    188KB

  • Sample

    240709-f3j8vazgke

  • MD5

    2f20133f655b7b8d83c7fccf564a61b6

  • SHA1

    406c1db4a9c97d8fc316dee39fe9658854c6654f

  • SHA256

    f48afcae633ee525f655225353a6cecc8f7b5c7539330e12fa4464a298476566

  • SHA512

    82919387085b20759c780b1e5682c25a4e1c8f6af69ae81d8256d8adfef5198869df3637800399d86ffae12dd74c26a040324e8768eff554815f0034182845ac

  • SSDEEP

    3072:1Suac9DFvTiGqo62w4Lyomp9cWUmpLr06AiIzVNQGcTzGFO:xaoDxiGk2ErcC3AiIpNQJ

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      2f20133f655b7b8d83c7fccf564a61b6_JaffaCakes118

    • Size

      188KB

    • MD5

      2f20133f655b7b8d83c7fccf564a61b6

    • SHA1

      406c1db4a9c97d8fc316dee39fe9658854c6654f

    • SHA256

      f48afcae633ee525f655225353a6cecc8f7b5c7539330e12fa4464a298476566

    • SHA512

      82919387085b20759c780b1e5682c25a4e1c8f6af69ae81d8256d8adfef5198869df3637800399d86ffae12dd74c26a040324e8768eff554815f0034182845ac

    • SSDEEP

      3072:1Suac9DFvTiGqo62w4Lyomp9cWUmpLr06AiIzVNQGcTzGFO:xaoDxiGk2ErcC3AiIpNQJ

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks