Overview

overview

7

Static

static

3

5d9ebcd17f...18.exe

windows7-x64

7

5d9ebcd17f...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d9ebcd17f1e623eff997c7159703921_JaffaCakes118

  • Size

    113KB

  • Sample

    240719-znj43ssgpb

  • MD5

    5d9ebcd17f1e623eff997c7159703921

  • SHA1

    dd6a8db8ec5c99a354ef8bb74a4640cc4d2b731b

  • SHA256

    4c4109d5f3cba6e9eaa9009150f7ec6ef1fd990870b1bb0722a8d6758e97e8c5

  • SHA512

    7f25a626083475084b9968abf3c7eff5990898b9eca108edf894417cefbf498d9d3c4bfca15682debf11dfd70cc461f1aba73ef2d2cb707e861c2607b8224e7f

  • SSDEEP

    3072:N8uzF3g1Wu7utuxusuWu2OnBQlbGGWaSbxDTYUWR:2gF3MzOAGGxSbxDTYnR

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      5d9ebcd17f1e623eff997c7159703921_JaffaCakes118

    • Size

      113KB

    • MD5

      5d9ebcd17f1e623eff997c7159703921

    • SHA1

      dd6a8db8ec5c99a354ef8bb74a4640cc4d2b731b

    • SHA256

      4c4109d5f3cba6e9eaa9009150f7ec6ef1fd990870b1bb0722a8d6758e97e8c5

    • SHA512

      7f25a626083475084b9968abf3c7eff5990898b9eca108edf894417cefbf498d9d3c4bfca15682debf11dfd70cc461f1aba73ef2d2cb707e861c2607b8224e7f

    • SSDEEP

      3072:N8uzF3g1Wu7utuxusuWu2OnBQlbGGWaSbxDTYUWR:2gF3MzOAGGxSbxDTYnR

    Score
    7/10
    spywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks