Overview

overview

7

Static

static

3

6505d196c3...18.exe

windows7-x64

7

6505d196c3...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6505d196c39a1a253d98ed76558acfa6_JaffaCakes118

  • Size

    447KB

  • Sample

    240722-19exxs1frg

  • MD5

    6505d196c39a1a253d98ed76558acfa6

  • SHA1

    26e47f3fe5d832d3b08678a524e7bee5db3f8913

  • SHA256

    9d20a273133a4ebdd5d2096ff3ac1d162454dcdb37babe89d0cfaafee1e0c753

  • SHA512

    0e57f0465b6bfe7c2fba8ab7d790e47dc42f667977a3d5cd6dd40ab0cad4badef8361a5a760c3fe46c740236a6aaa6f9f4db58212568c8ac5c1a118c2ed2e365

  • SSDEEP

    12288:CvGKHzjSRu3rI9gdRdvLnAC97V392lP7HUeox3:CvG2XhrI+dRdkC9p3MR7e

Score
7/10
persistencespywarestealerupx

Malware Config

Targets

    • Target

      6505d196c39a1a253d98ed76558acfa6_JaffaCakes118

    • Size

      447KB

    • MD5

      6505d196c39a1a253d98ed76558acfa6

    • SHA1

      26e47f3fe5d832d3b08678a524e7bee5db3f8913

    • SHA256

      9d20a273133a4ebdd5d2096ff3ac1d162454dcdb37babe89d0cfaafee1e0c753

    • SHA512

      0e57f0465b6bfe7c2fba8ab7d790e47dc42f667977a3d5cd6dd40ab0cad4badef8361a5a760c3fe46c740236a6aaa6f9f4db58212568c8ac5c1a118c2ed2e365

    • SSDEEP

      12288:CvGKHzjSRu3rI9gdRdvLnAC97V392lP7HUeox3:CvG2XhrI+dRdkC9p3MR7e

    Score
    7/10
    persistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks