Overview

overview

10

Static

static

3

59ef8908db...18.exe

windows7-x64

10

59ef8908db...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    59ef8908db1df1f144becadf40c68622_JaffaCakes118

  • Size

    207KB

  • Sample

    240719-b1fqeswhlp

  • MD5

    59ef8908db1df1f144becadf40c68622

  • SHA1

    1876ae57c54233bb1bdac1cb84d72d9211b8d53a

  • SHA256

    6697ade7ea453c6e2dfd85b3cac72d03278366c3c425a65edc170edde4727d83

  • SHA512

    c7e2ac1275996237993baea710433f50a6ba41eb58c138b9524fffa220fc1d37e195aa3a2e849a128e590c0926bf2d58b486df3b9eb07a6b8871cfb6608f2182

  • SSDEEP

    6144:kfCnB4tuRxfmSEVD4033I637wlV/gBjI7hHHEmTNUv+:kfIzRxfmSEH3IRpZEmh

Score
10/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      59ef8908db1df1f144becadf40c68622_JaffaCakes118

    • Size

      207KB

    • MD5

      59ef8908db1df1f144becadf40c68622

    • SHA1

      1876ae57c54233bb1bdac1cb84d72d9211b8d53a

    • SHA256

      6697ade7ea453c6e2dfd85b3cac72d03278366c3c425a65edc170edde4727d83

    • SHA512

      c7e2ac1275996237993baea710433f50a6ba41eb58c138b9524fffa220fc1d37e195aa3a2e849a128e590c0926bf2d58b486df3b9eb07a6b8871cfb6608f2182

    • SSDEEP

      6144:kfCnB4tuRxfmSEVD4033I637wlV/gBjI7hHHEmTNUv+:kfIzRxfmSEH3IRpZEmh

    Score
    10/10
    persistencespywarestealerupx

    • Modifies WinLogon for persistence

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks