Overview

overview

7

Static

static

7

429acb709d...18.exe

windows7-x64

7

429acb709d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    429acb709d5f0fd8a40beecc72c9fa89_JaffaCakes118

  • Size

    518KB

  • Sample

    240713-vrhcfasapf

  • MD5

    429acb709d5f0fd8a40beecc72c9fa89

  • SHA1

    0c6ae3cec530d155074510a4f4a5acaf8ef3abce

  • SHA256

    c5f9c9512a8d4efe4cea83bddc1b7e2cea0dbbb4297923c74c30f817433cfae3

  • SHA512

    b2e35681804e67d6e599c448ede9bf0d0776d3eb7fa6dc847850367dc62622851fd746202f42028a969d1e167773d5f6821ecce24108a1408d6fa3bbed7129b3

  • SSDEEP

    12288:G5GzoHmEaY4r8Y38wGNQ1axaAmS6IEPzjipswj5iHN6Mp4o:G4zoH7aYI9WNVmH5His+5iHJ4o

Score
7/10
spywarestealerupx

Malware Config

Targets

    • Target

      429acb709d5f0fd8a40beecc72c9fa89_JaffaCakes118

    • Size

      518KB

    • MD5

      429acb709d5f0fd8a40beecc72c9fa89

    • SHA1

      0c6ae3cec530d155074510a4f4a5acaf8ef3abce

    • SHA256

      c5f9c9512a8d4efe4cea83bddc1b7e2cea0dbbb4297923c74c30f817433cfae3

    • SHA512

      b2e35681804e67d6e599c448ede9bf0d0776d3eb7fa6dc847850367dc62622851fd746202f42028a969d1e167773d5f6821ecce24108a1408d6fa3bbed7129b3

    • SSDEEP

      12288:G5GzoHmEaY4r8Y38wGNQ1axaAmS6IEPzjipswj5iHN6Mp4o:G4zoH7aYI9WNVmH5His+5iHJ4o

    Score
    7/10
    spywarestealerupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks