Overview

overview

7

Static

static

3

39704b54cb...18.exe

windows7-x64

7

39704b54cb...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    39704b54cbb66e29e4ce55509d2dfb31_JaffaCakes118

  • Size

    186KB

  • Sample

    240711-rd9b8azaml

  • MD5

    39704b54cbb66e29e4ce55509d2dfb31

  • SHA1

    cb9e4af86832a64d573e0e27249111eaa1171354

  • SHA256

    11023b554d894e01555b176f6304450c68c1ffa4969739c6414a9de46e328fbd

  • SHA512

    05ba1833f65ef36988fc853f967d3881af5c5939c48ea2c6918ab3448360ba7dca72ed5b7585659d860b946329865f38f9ea3c661bd1977fe360e99ce1119f09

  • SSDEEP

    3072:HaK67zlkbHyoY/JxjDcX64V59axbMoOk/ZS5zdUi0lEAJhs3rnKX1xtm:HaKTbS3TncKwsBh/Z4dUi0lEAJhs3rKd

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      39704b54cbb66e29e4ce55509d2dfb31_JaffaCakes118

    • Size

      186KB

    • MD5

      39704b54cbb66e29e4ce55509d2dfb31

    • SHA1

      cb9e4af86832a64d573e0e27249111eaa1171354

    • SHA256

      11023b554d894e01555b176f6304450c68c1ffa4969739c6414a9de46e328fbd

    • SHA512

      05ba1833f65ef36988fc853f967d3881af5c5939c48ea2c6918ab3448360ba7dca72ed5b7585659d860b946329865f38f9ea3c661bd1977fe360e99ce1119f09

    • SSDEEP

      3072:HaK67zlkbHyoY/JxjDcX64V59axbMoOk/ZS5zdUi0lEAJhs3rnKX1xtm:HaKTbS3TncKwsBh/Z4dUi0lEAJhs3rKd

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks