Overview

overview

7

Static

static

3

36652760c2...18.exe

windows7-x64

7

36652760c2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36652760c279a7c8b4ba3c55493e86bd_JaffaCakes118

  • Size

    111KB

  • Sample

    240710-zz6gfszfmj

  • MD5

    36652760c279a7c8b4ba3c55493e86bd

  • SHA1

    355b411b6af7c9e8c116d121201e3458f8e3b89d

  • SHA256

    5b21463c7f9a6ee9aa0c00feefd3bcaa0d34d94a1adc682288e13cee82eab510

  • SHA512

    c11336d58674629b0e7d0ffaa8272b269540424abecf94283fd07e441f2619191ba9a63155f348b299c5ea4f786d4aabd64b45409bb3ad628d5ff573c004a0ba

  • SSDEEP

    3072:5GEo/XOBybJv7TW2HMzWkE6krixMNADODCFzlO1sTkLgjL:bo/X9lVH9X+ODlg

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      36652760c279a7c8b4ba3c55493e86bd_JaffaCakes118

    • Size

      111KB

    • MD5

      36652760c279a7c8b4ba3c55493e86bd

    • SHA1

      355b411b6af7c9e8c116d121201e3458f8e3b89d

    • SHA256

      5b21463c7f9a6ee9aa0c00feefd3bcaa0d34d94a1adc682288e13cee82eab510

    • SHA512

      c11336d58674629b0e7d0ffaa8272b269540424abecf94283fd07e441f2619191ba9a63155f348b299c5ea4f786d4aabd64b45409bb3ad628d5ff573c004a0ba

    • SSDEEP

      3072:5GEo/XOBybJv7TW2HMzWkE6krixMNADODCFzlO1sTkLgjL:bo/X9lVH9X+ODlg

    Score
    7/10
    spywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks