3b06e71f4739b0b14dc94acd5a04e91d35b3654407a95618b121c08dacbc0105 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64018c29dd091a8b3c663469ea0547e6_JaffaCakes118
Size

174KB
Sample

240722-vf2lyaxeja
MD5

64018c29dd091a8b3c663469ea0547e6
SHA1

a48b7f6dac6743a77400d8438c6278f6320f697a
SHA256

3b06e71f4739b0b14dc94acd5a04e91d35b3654407a95618b121c08dacbc0105
SHA512

191462212f5657615f2cf3c8977b764de5ddbe1796b1f96765f3e0ba9e77f538baa88a7d300577bf9cc6c3686f38a4ef03512852723195375af14b3510df5d8a
SSDEEP

3072:3SUYJWQ0McZGVdj5zsQptuWHA9T7IrL6xGaLrtlOkO2f6Zk2WmI332OVidUH:w0MBphsAOTcrLqG9kOja2Wmr2

Score

7^/10

persistence spyware stealer upx

Malware Config

Targets

- Target
  
  64018c29dd091a8b3c663469ea0547e6_JaffaCakes118
- Size
  
  174KB
- MD5
  
  64018c29dd091a8b3c663469ea0547e6
- SHA1
  
  a48b7f6dac6743a77400d8438c6278f6320f697a
- SHA256
  
  3b06e71f4739b0b14dc94acd5a04e91d35b3654407a95618b121c08dacbc0105
- SHA512
  
  191462212f5657615f2cf3c8977b764de5ddbe1796b1f96765f3e0ba9e77f538baa88a7d300577bf9cc6c3686f38a4ef03512852723195375af14b3510df5d8a
- SSDEEP
  
  3072:3SUYJWQ0McZGVdj5zsQptuWHA9T7IrL6xGaLrtlOkO2f6Zk2WmI332OVidUH:w0MBphsAOTcrLqG9kOja2Wmr2
Score

7^/10

persistence spyware stealer upx
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealerupx

behavioral2