Overview

overview

7

Static

static

3

3a9ea92d30...18.exe

windows7-x64

7

3a9ea92d30...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a9ea92d3076292d9db5ccf0a62a189c_JaffaCakes118

  • Size

    636KB

  • Sample

    240711-zb3qnavgkd

  • MD5

    3a9ea92d3076292d9db5ccf0a62a189c

  • SHA1

    8ecf87a5b7bec0b108751ee6b620588a3948795e

  • SHA256

    6e85404659057cff6b5d7566d3c796f138e99655a6edc68da16be4960b43f325

  • SHA512

    25c27164f9d50d95c7be0b2d3c9d95663ffb6e62264553d44c063b72dc28bda9c0c0cd0ead9cab63c9bb082b4b2e1edcfec65edcc14740c797bd0b139260a2e8

  • SSDEEP

    12288:f5qKJTNbGd/XvrvBxZIZuJbr9CUcb8ZnyALtqV67pTFD1lmphaHSb:7BS/XvrnZCsQZb89p86z106HSb

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      3a9ea92d3076292d9db5ccf0a62a189c_JaffaCakes118

    • Size

      636KB

    • MD5

      3a9ea92d3076292d9db5ccf0a62a189c

    • SHA1

      8ecf87a5b7bec0b108751ee6b620588a3948795e

    • SHA256

      6e85404659057cff6b5d7566d3c796f138e99655a6edc68da16be4960b43f325

    • SHA512

      25c27164f9d50d95c7be0b2d3c9d95663ffb6e62264553d44c063b72dc28bda9c0c0cd0ead9cab63c9bb082b4b2e1edcfec65edcc14740c797bd0b139260a2e8

    • SSDEEP

      12288:f5qKJTNbGd/XvrvBxZIZuJbr9CUcb8ZnyALtqV67pTFD1lmphaHSb:7BS/XvrnZCsQZb89p86z106HSb

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks