Overview

overview

7

Static

static

7

5d971876bf...18.exe

windows7-x64

7

5d971876bf...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d971876bf443692e72516019670627f_JaffaCakes118

  • Size

    51KB

  • Sample

    240719-zhebmsyelp

  • MD5

    5d971876bf443692e72516019670627f

  • SHA1

    2d0e58fec113ce2bb016a4cea7b88c690fb6434e

  • SHA256

    398a9fdcc0886630c032e8ef605fe0c79c86b7fa2a9193adb792e49fa75819d2

  • SHA512

    83170005144137ecaab37ac5264c8f5427db496193ea4141382e954cafc91b67dda2b5eab07831fe5bff10fe4baeeeb718f6a211ed78376d84786451875e796d

  • SSDEEP

    768:17R7tZuIgLFhv6kn8hqkviNA+yw2XuU9vguo+V1T9XKHf+AM+vx:17DZZkfka0Xbvgt+V1T96Hf3MKx

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      5d971876bf443692e72516019670627f_JaffaCakes118

    • Size

      51KB

    • MD5

      5d971876bf443692e72516019670627f

    • SHA1

      2d0e58fec113ce2bb016a4cea7b88c690fb6434e

    • SHA256

      398a9fdcc0886630c032e8ef605fe0c79c86b7fa2a9193adb792e49fa75819d2

    • SHA512

      83170005144137ecaab37ac5264c8f5427db496193ea4141382e954cafc91b67dda2b5eab07831fe5bff10fe4baeeeb718f6a211ed78376d84786451875e796d

    • SSDEEP

      768:17R7tZuIgLFhv6kn8hqkviNA+yw2XuU9vguo+V1T9XKHf+AM+vx:17DZZkfka0Xbvgt+V1T96Hf3MKx

    Score
    7/10
    persistencespywarestealerupx

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks