Overview

overview

7

Static

static

3

3d09686bad...18.exe

windows7-x64

7

3d09686bad...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d09686bad3872d961ec8050557b6ec8_JaffaCakes118

  • Size

    635KB

  • Sample

    240712-mqewxssbpa

  • MD5

    3d09686bad3872d961ec8050557b6ec8

  • SHA1

    23c03ca2ac960657a7f2945740699d96b10bebb4

  • SHA256

    381ab4235ea93d45e9d01787f7329c580a3aee80f1b801c4c458227a3b7490db

  • SHA512

    b758d2b87357aef6e03aea9df963a8d813f56487cfbe8f42350d8cd016ce92126f4f424235dfff8495b32b533400052c2a6c0a5bad45a97319acf517b6cb0285

  • SSDEEP

    12288:GMOvCOEcPj63RuYyEzXRYDunC0Ax5ME2uraXH1mjOdZgKegyX+hi/Q/jAu0UfRHL:UOSay+BU865aurawzFgY+h1R0Kp

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      3d09686bad3872d961ec8050557b6ec8_JaffaCakes118

    • Size

      635KB

    • MD5

      3d09686bad3872d961ec8050557b6ec8

    • SHA1

      23c03ca2ac960657a7f2945740699d96b10bebb4

    • SHA256

      381ab4235ea93d45e9d01787f7329c580a3aee80f1b801c4c458227a3b7490db

    • SHA512

      b758d2b87357aef6e03aea9df963a8d813f56487cfbe8f42350d8cd016ce92126f4f424235dfff8495b32b533400052c2a6c0a5bad45a97319acf517b6cb0285

    • SSDEEP

      12288:GMOvCOEcPj63RuYyEzXRYDunC0Ax5ME2uraXH1mjOdZgKegyX+hi/Q/jAu0UfRHL:UOSay+BU865aurawzFgY+h1R0Kp

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks