Overview

overview

7

Static

static

3

5feb9a87f8...18.exe

windows7-x64

7

5feb9a87f8...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5feb9a87f8d6ca48b7d85c709989d0cb_JaffaCakes118

  • Size

    256KB

  • Sample

    240720-lef46swckl

  • MD5

    5feb9a87f8d6ca48b7d85c709989d0cb

  • SHA1

    7dad6b74f4c7076f4fb5c3416dce2ee0d8f439bc

  • SHA256

    0616815f878768a3b5b1c371c131645676c8624ccd2c091f561876bef14ff695

  • SHA512

    e3da0de1b993521cbdef54bf02ac0fa8062d5ec3160eaf8a1f8a9b1b80b0f4b353129da865bea33cce4e111da85c802dc45f338a634f3acef2ac53d84d9b9126

  • SSDEEP

    6144:nmsl1nSuzsNHE/6SJfPvJeg/6SJfYMbes/6SJfPvJeg/6SJf:m0ngNkiSfiSe0iSfiS

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      5feb9a87f8d6ca48b7d85c709989d0cb_JaffaCakes118

    • Size

      256KB

    • MD5

      5feb9a87f8d6ca48b7d85c709989d0cb

    • SHA1

      7dad6b74f4c7076f4fb5c3416dce2ee0d8f439bc

    • SHA256

      0616815f878768a3b5b1c371c131645676c8624ccd2c091f561876bef14ff695

    • SHA512

      e3da0de1b993521cbdef54bf02ac0fa8062d5ec3160eaf8a1f8a9b1b80b0f4b353129da865bea33cce4e111da85c802dc45f338a634f3acef2ac53d84d9b9126

    • SSDEEP

      6144:nmsl1nSuzsNHE/6SJfPvJeg/6SJfYMbes/6SJfPvJeg/6SJf:m0ngNkiSfiSe0iSfiS

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks