58dcf6c906ba1a10631cae8224ddef57f40bb0b6be2c42520697beeb4a1be497 | Triage

Submit
Reports

Overview

overview

7

Static

static

3

5d241b055f...18.exe

windows7-x64

7

5d241b055f...18.exe

windows10-2004-x64

3

Sharing

General

Target

5d241b055f7137728df6912317976a53_JaffaCakes118
Size

164KB
Sample

240719-w37l5stfqq
MD5

5d241b055f7137728df6912317976a53
SHA1

78d5cb0bf161b2466e24838034aeca38b985f1b4
SHA256

58dcf6c906ba1a10631cae8224ddef57f40bb0b6be2c42520697beeb4a1be497
SHA512

0d7f926ba5ec1d893ad3242742f4f305fd257154a4cd725773383cf58051005a3910daab421cf34e3eebdea7b452ef94f0617dded80a181cdd22054058a3a476
SSDEEP

3072:4fSCDywW2OJpFALQZ8neOwv6IfVMLrLsgo9xQdvKK4OH:4fljLOJpSwGANML3CDQlKXO

Score

7^/10

persistence spyware stealer upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

5d241b055f7137728df6912317976a53_JaffaCakes118.exe

Resource

win7-20240704-en

persistence spyware stealer upx

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

5d241b055f7137728df6912317976a53_JaffaCakes118.exe

Resource

win10v2004-20240704-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  5d241b055f7137728df6912317976a53_JaffaCakes118
- Size
  
  164KB
- MD5
  
  5d241b055f7137728df6912317976a53
- SHA1
  
  78d5cb0bf161b2466e24838034aeca38b985f1b4
- SHA256
  
  58dcf6c906ba1a10631cae8224ddef57f40bb0b6be2c42520697beeb4a1be497
- SHA512
  
  0d7f926ba5ec1d893ad3242742f4f305fd257154a4cd725773383cf58051005a3910daab421cf34e3eebdea7b452ef94f0617dded80a181cdd22054058a3a476
- SSDEEP
  
  3072:4fSCDywW2OJpFALQZ8neOwv6IfVMLrLsgo9xQdvKK4OH:4fljLOJpSwGANML3CDQlKXO
Score

7^/10

persistence spyware stealer upx
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2

© 2018-2025

Terms | Privacy