Overview

overview

7

Static

static

7

30e58e04f2...18.exe

windows7-x64

7

30e58e04f2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30e58e04f21c946ce44c04728d448507_JaffaCakes118

  • Size

    75KB

  • Sample

    240709-spa48szdpj

  • MD5

    30e58e04f21c946ce44c04728d448507

  • SHA1

    d88b350862b3d3c580c9787bebfd444afe6f97ea

  • SHA256

    de2b96867af4357e28ab8422330dd48488ddee6e1ff5337e301977cf4ab111b7

  • SHA512

    db4f1906eedad8da199268023c9a67b7463b74606c3e2d785de18219a6f204b63d9d332c0fa0f5c85c5dfec95cfbd0aad367d9c69d1e0b78a2987b5feef297ec

  • SSDEEP

    1536:SKcR4mjD9r823FHKcR4mjD9r823FLSlXxPN:SKcWmjRrz3ZKcWmjRrz3xSVxPN

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      30e58e04f21c946ce44c04728d448507_JaffaCakes118

    • Size

      75KB

    • MD5

      30e58e04f21c946ce44c04728d448507

    • SHA1

      d88b350862b3d3c580c9787bebfd444afe6f97ea

    • SHA256

      de2b96867af4357e28ab8422330dd48488ddee6e1ff5337e301977cf4ab111b7

    • SHA512

      db4f1906eedad8da199268023c9a67b7463b74606c3e2d785de18219a6f204b63d9d332c0fa0f5c85c5dfec95cfbd0aad367d9c69d1e0b78a2987b5feef297ec

    • SSDEEP

      1536:SKcR4mjD9r823FHKcR4mjD9r823FLSlXxPN:SKcWmjRrz3ZKcWmjRrz3xSVxPN

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks