Overview

overview

10

Static

static

3

4b989853f7...18.exe

windows7-x64

10

4b989853f7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b989853f7beada4dfd256b291cc1e91_JaffaCakes118

  • Size

    171KB

  • Sample

    240715-1ysdwa1gkk

  • MD5

    4b989853f7beada4dfd256b291cc1e91

  • SHA1

    83e9d9882f08d89f8fc27eb85e83106b604454ba

  • SHA256

    a4746ef8fc8e01917812d7cdac113f3e7f019552e377c5deaf4ff6e67c07a03a

  • SHA512

    d11147350f3c922eaeba9acc24e2c86a18f2fe444618d392f68121f59e0db60b343b49d6edc329d8ea2910d8d837e239ee71c245f9cdbebb6793ec3de10cd11a

  • SSDEEP

    3072:YUftOL184ayOtCJPBwYPkNYzrOI9QFTe/28kinNJwfcmtKzEIt4e/r3fTy3OJjRl:/ftOLm4AtC/w24YrOSQVrniycmtKAw4S

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      4b989853f7beada4dfd256b291cc1e91_JaffaCakes118

    • Size

      171KB

    • MD5

      4b989853f7beada4dfd256b291cc1e91

    • SHA1

      83e9d9882f08d89f8fc27eb85e83106b604454ba

    • SHA256

      a4746ef8fc8e01917812d7cdac113f3e7f019552e377c5deaf4ff6e67c07a03a

    • SHA512

      d11147350f3c922eaeba9acc24e2c86a18f2fe444618d392f68121f59e0db60b343b49d6edc329d8ea2910d8d837e239ee71c245f9cdbebb6793ec3de10cd11a

    • SSDEEP

      3072:YUftOL184ayOtCJPBwYPkNYzrOI9QFTe/28kinNJwfcmtKzEIt4e/r3fTy3OJjRl:/ftOLm4AtC/w24YrOSQVrniycmtKAw4S

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks