Overview

overview

10

Static

static

7

5f8e034d2b...18.exe

windows7-x64

10

5f8e034d2b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f8e034d2baa07bf69d574ed3ebca756_JaffaCakes118

  • Size

    48KB

  • Sample

    240720-h8j65ssckk

  • MD5

    5f8e034d2baa07bf69d574ed3ebca756

  • SHA1

    0fda2a1aa2aaaadccc8e4b3af8c37ffec58d0c8f

  • SHA256

    4d96d0887707b1f2b5eb17ce938b063e6a1db86158c3c6a59b7a994b159c3797

  • SHA512

    bba70f505450599bce9a4a2ed08ad4c975a177e91c75ded3eba3a1b360820532c7bb17474b693196d52bda9aca155480e2eb2b0d7c9053f5fb0ded6fa863845d

  • SSDEEP

    768:vh4B6VbxNYmmOsUfIu2GLOGu7xcmYaopEii32CsJNu:v06VbxakIuXOygKEiiGJNu

Score
10/10
evasionspywarestealerupx

Malware Config

Targets

    • Target

      5f8e034d2baa07bf69d574ed3ebca756_JaffaCakes118

    • Size

      48KB

    • MD5

      5f8e034d2baa07bf69d574ed3ebca756

    • SHA1

      0fda2a1aa2aaaadccc8e4b3af8c37ffec58d0c8f

    • SHA256

      4d96d0887707b1f2b5eb17ce938b063e6a1db86158c3c6a59b7a994b159c3797

    • SHA512

      bba70f505450599bce9a4a2ed08ad4c975a177e91c75ded3eba3a1b360820532c7bb17474b693196d52bda9aca155480e2eb2b0d7c9053f5fb0ded6fa863845d

    • SSDEEP

      768:vh4B6VbxNYmmOsUfIu2GLOGu7xcmYaopEii32CsJNu:v06VbxakIuXOygKEiiGJNu

    Score
    10/10
    evasionspywarestealerupx

    • Modifies firewall policy service

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks