Overview

overview

7

Static

static

7

3c99afb850...18.exe

windows7-x64

7

3c99afb850...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c99afb850a6d8c7dbc556ca813ad2d9_JaffaCakes118

  • Size

    654KB

  • Sample

    240712-j1tlaaxdpg

  • MD5

    3c99afb850a6d8c7dbc556ca813ad2d9

  • SHA1

    05cdc57a4f7e9e139b8fc3bb44c56b3b0893f463

  • SHA256

    a48be2ddc79ce419a3fcec49b07d4ca8acd4d335a90350f56e4e16ec859707cb

  • SHA512

    765977f1d38e384ff8cd390c58d43fb2aebbb656ac3d575643864a577d95ad9bcda6396b34609c672d0d10c81ac14278ca424fd23ce3db1df672aa15f8dcc407

  • SSDEEP

    12288:l5epGw9jVDZVSCDIPNwPCz5MvfYHdAL3H9Kfh/wDrtnqCYzKTH:l5Ij9BD3vIPuHfY9qm9ErtqCAEH

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      3c99afb850a6d8c7dbc556ca813ad2d9_JaffaCakes118

    • Size

      654KB

    • MD5

      3c99afb850a6d8c7dbc556ca813ad2d9

    • SHA1

      05cdc57a4f7e9e139b8fc3bb44c56b3b0893f463

    • SHA256

      a48be2ddc79ce419a3fcec49b07d4ca8acd4d335a90350f56e4e16ec859707cb

    • SHA512

      765977f1d38e384ff8cd390c58d43fb2aebbb656ac3d575643864a577d95ad9bcda6396b34609c672d0d10c81ac14278ca424fd23ce3db1df672aa15f8dcc407

    • SSDEEP

      12288:l5epGw9jVDZVSCDIPNwPCz5MvfYHdAL3H9Kfh/wDrtnqCYzKTH:l5Ij9BD3vIPuHfY9qm9ErtqCAEH

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks