Overview

overview

7

Static

static

3

3d005df0bf...18.exe

windows7-x64

7

3d005df0bf...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d005df0bfe8a5e337cb3ae7a77eb1a8_JaffaCakes118

  • Size

    124KB

  • Sample

    240712-mg5qzszarm

  • MD5

    3d005df0bfe8a5e337cb3ae7a77eb1a8

  • SHA1

    5b4aadd8bd8b1e4d09dc06610d450c56cd4c98c7

  • SHA256

    9a0d20eb578497b7dba20db2900034a514e02aeaa7bef55a40a17508169ef9da

  • SHA512

    7d5e0d1b09bf238ebc0ef1b130eee76cfa51bb71f82c69ebdbdef26586ac8c7f66d2b7a209b6e5d30c15c0d490018790d2e45f73cef14afd8a51fbf516a43ad9

  • SSDEEP

    3072:LeDdr8/jK4mbV9rugy4Vxcpp21FzpYx7G:LSr8/OB99yD2DM

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      3d005df0bfe8a5e337cb3ae7a77eb1a8_JaffaCakes118

    • Size

      124KB

    • MD5

      3d005df0bfe8a5e337cb3ae7a77eb1a8

    • SHA1

      5b4aadd8bd8b1e4d09dc06610d450c56cd4c98c7

    • SHA256

      9a0d20eb578497b7dba20db2900034a514e02aeaa7bef55a40a17508169ef9da

    • SHA512

      7d5e0d1b09bf238ebc0ef1b130eee76cfa51bb71f82c69ebdbdef26586ac8c7f66d2b7a209b6e5d30c15c0d490018790d2e45f73cef14afd8a51fbf516a43ad9

    • SSDEEP

      3072:LeDdr8/jK4mbV9rugy4Vxcpp21FzpYx7G:LSr8/OB99yD2DM

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks