32217d438c84fef849e91ff96b3fec11e0f1a477a9c70e78327f8df43ce46813 | Triage

Submit
Reports

Overview

overview

Static

static

7

6356ffa6d0...18.exe

windows7-x64

6356ffa6d0...18.exe

windows10-2004-x64

7

Sharing

General

Target

6356ffa6d059396dd938b01b1d64ea2e_JaffaCakes118
Size

31KB
Sample

240722-qnfbfszgpr
MD5

6356ffa6d059396dd938b01b1d64ea2e
SHA1

784cd5a7617e705b7557263fa9ad82bec6b90ea8
SHA256

32217d438c84fef849e91ff96b3fec11e0f1a477a9c70e78327f8df43ce46813
SHA512

82fc5ca95a9cfb0c76208c9b3a483350fb7d672ab94d62b74f943de558c8066e3b7a06839d9e3f1fa44a3eeb7ee3942593d236ac23c98ce1835548c4d79798f3
SSDEEP

384:XtmAOsdjaNOGB9JZ6IbPumE3ErNfWCUbLBYeHvgWzCnoYvHWRAwopsnObBkbJyFo:dmA5djaRF83AeCaYah+sOoyFxgYl8/0

Score

10^/10

evasion spyware stealer upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6356ffa6d059396dd938b01b1d64ea2e_JaffaCakes118.exe

Resource

win7-20240704-en

evasion spyware stealer upx

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

6356ffa6d059396dd938b01b1d64ea2e_JaffaCakes118.exe

Resource

win10v2004-20240709-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  6356ffa6d059396dd938b01b1d64ea2e_JaffaCakes118
- Size
  
  31KB
- MD5
  
  6356ffa6d059396dd938b01b1d64ea2e
- SHA1
  
  784cd5a7617e705b7557263fa9ad82bec6b90ea8
- SHA256
  
  32217d438c84fef849e91ff96b3fec11e0f1a477a9c70e78327f8df43ce46813
- SHA512
  
  82fc5ca95a9cfb0c76208c9b3a483350fb7d672ab94d62b74f943de558c8066e3b7a06839d9e3f1fa44a3eeb7ee3942593d236ac23c98ce1835548c4d79798f3
- SSDEEP
  
  384:XtmAOsdjaNOGB9JZ6IbPumE3ErNfWCUbLBYeHvgWzCnoYvHWRAwopsnObBkbJyFo:dmA5djaRF83AeCaYah+sOoyFxgYl8/0
Score

10^/10

evasion spyware stealer upx
- Modifies firewall policy service
  evasion
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionspywarestealerupx

behavioral2

© 2018-2025

Terms | Privacy