Overview

overview

7

Static

static

7

3e57dfa56b...18.exe

windows7-x64

7

3e57dfa56b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e57dfa56bdf17600665df0ebb25a52b_JaffaCakes118

  • Size

    28KB

  • Sample

    240712-wqqg4awgpg

  • MD5

    3e57dfa56bdf17600665df0ebb25a52b

  • SHA1

    d243561fcf206dbecffea2722d5e73d9abdba5f0

  • SHA256

    9d85be43b04562666716b833d58984d59fc1a98e3492f6a9c36bb5481794aecb

  • SHA512

    e8c6d0c5e67e21767cb4f69365cf60341ee73feab3818d030b69cb1da6daa75db71889463ab7cfb1282edd619ef9822be039783fd8cf79664868f2ae0d746104

  • SSDEEP

    768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIoP:egKcR4mjD9r824

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      3e57dfa56bdf17600665df0ebb25a52b_JaffaCakes118

    • Size

      28KB

    • MD5

      3e57dfa56bdf17600665df0ebb25a52b

    • SHA1

      d243561fcf206dbecffea2722d5e73d9abdba5f0

    • SHA256

      9d85be43b04562666716b833d58984d59fc1a98e3492f6a9c36bb5481794aecb

    • SHA512

      e8c6d0c5e67e21767cb4f69365cf60341ee73feab3818d030b69cb1da6daa75db71889463ab7cfb1282edd619ef9822be039783fd8cf79664868f2ae0d746104

    • SSDEEP

      768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIoP:egKcR4mjD9r824

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks