Overview

overview

9

Static

static

3

3f652fd2af...18.exe

windows7-x64

9

3f652fd2af...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f652fd2af0d23a57c061a79be469d4e_JaffaCakes118

  • Size

    310KB

  • Sample

    240712-31j7dsyfpf

  • MD5

    3f652fd2af0d23a57c061a79be469d4e

  • SHA1

    aaefb1b2831c36ec7c45d86e12b49508a2794bef

  • SHA256

    84ace7017f994bb131ca2387df9a304647748e8a9109e608b64b493d9cd2e9f8

  • SHA512

    d178c4d75d600c4d189d017ac1122160f8520641a6f1a9834843972c31ff3c5f9a431045034d246c9771e81a0c6554edd5a74589900f40b78d54706172b1c6f2

  • SSDEEP

    6144:XjUca5+gfpUOiI584eeD14ootXO/JskNAVNe4:XYco+gunI24e+ykqVNe4

Score
9/10
spywarestealerupx

Malware Config

Targets

    • Target

      3f652fd2af0d23a57c061a79be469d4e_JaffaCakes118

    • Size

      310KB

    • MD5

      3f652fd2af0d23a57c061a79be469d4e

    • SHA1

      aaefb1b2831c36ec7c45d86e12b49508a2794bef

    • SHA256

      84ace7017f994bb131ca2387df9a304647748e8a9109e608b64b493d9cd2e9f8

    • SHA512

      d178c4d75d600c4d189d017ac1122160f8520641a6f1a9834843972c31ff3c5f9a431045034d246c9771e81a0c6554edd5a74589900f40b78d54706172b1c6f2

    • SSDEEP

      6144:XjUca5+gfpUOiI584eeD14ootXO/JskNAVNe4:XYco+gunI24e+ykqVNe4

    Score
    9/10
    spywarestealerupx

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks