Overview

overview

10

Static

static

10

3160769781...18.exe

windows7-x64

7

3160769781...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31607697817b647673390b63259041ba_JaffaCakes118

  • Size

    196KB

  • Sample

    240709-wfww5aybnh

  • MD5

    31607697817b647673390b63259041ba

  • SHA1

    e9fa81c74b8147e6e0d6192747402e63e200b68c

  • SHA256

    09dc0aaff27281e9004131843a574c79a0cf1f4525e7f16558a4ef195f24e436

  • SHA512

    91998c1d650449e1aec1a070b470ec986537eddb692cd0041e5ac6dd13173f7efeb04d1f61ac0722974400831637da06906467567783d3a19dced63f08264099

  • SSDEEP

    3072:FTqPRLyeIKDWx85IOlKeJVos/8eRwXiUUAdV95I4Rp+LH1xrl3Ez8ub8Xr:FTqPRLdIKCC0ef//uXltKc+LVsz9b8

Score
10/10
isrstealerspywarestealerupx

Malware Config

Targets

    • Target

      31607697817b647673390b63259041ba_JaffaCakes118

    • Size

      196KB

    • MD5

      31607697817b647673390b63259041ba

    • SHA1

      e9fa81c74b8147e6e0d6192747402e63e200b68c

    • SHA256

      09dc0aaff27281e9004131843a574c79a0cf1f4525e7f16558a4ef195f24e436

    • SHA512

      91998c1d650449e1aec1a070b470ec986537eddb692cd0041e5ac6dd13173f7efeb04d1f61ac0722974400831637da06906467567783d3a19dced63f08264099

    • SSDEEP

      3072:FTqPRLyeIKDWx85IOlKeJVos/8eRwXiUUAdV95I4Rp+LH1xrl3Ez8ub8Xr:FTqPRLdIKCC0ef//uXltKc+LVsz9b8

    Score
    7/10
    spywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks