Overview

overview

7

Static

static

7

604b714470...18.exe

windows7-x64

7

604b714470...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    604b7144703850d7e96512d2c248d83a_JaffaCakes118

  • Size

    880KB

  • Sample

    240720-2rf8ps1aqj

  • MD5

    604b7144703850d7e96512d2c248d83a

  • SHA1

    4cd2e73d789ce9b9ed6913756127cc44a44b2354

  • SHA256

    17c067a6ae9fb6e09106d88bf502704690e1a0a78226ae1a9a8a6ef342de94d6

  • SHA512

    c5cccde77d3045f954b3997cb85a2644fd867dfae870e35ff4c38ab55de9ce733342c971e24066fc38affee30feb94af34236b3fa0a9343dced882c3d40a579d

  • SSDEEP

    12288:smpwTPsMKBuJdwBiaB0ZtbaXAC+KbkmVTxFoqn0HuAAnlYO+aebxpJfoMDtiW39b:eLsoi0XRKbkm1t1Dh+aebxpJgWNtT

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      604b7144703850d7e96512d2c248d83a_JaffaCakes118

    • Size

      880KB

    • MD5

      604b7144703850d7e96512d2c248d83a

    • SHA1

      4cd2e73d789ce9b9ed6913756127cc44a44b2354

    • SHA256

      17c067a6ae9fb6e09106d88bf502704690e1a0a78226ae1a9a8a6ef342de94d6

    • SHA512

      c5cccde77d3045f954b3997cb85a2644fd867dfae870e35ff4c38ab55de9ce733342c971e24066fc38affee30feb94af34236b3fa0a9343dced882c3d40a579d

    • SSDEEP

      12288:smpwTPsMKBuJdwBiaB0ZtbaXAC+KbkmVTxFoqn0HuAAnlYO+aebxpJfoMDtiW39b:eLsoi0XRKbkm1t1Dh+aebxpJgWNtT

    Score
    7/10
    persistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks