Overview

overview

9

Static

static

7

75558dbc8f...18.exe

windows7-x64

9

75558dbc8f...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75558dbc8fdd8a82c2385b86bbf04a4c_JaffaCakes118

  • Size

    169KB

  • Sample

    240726-xs5v8sydqp

  • MD5

    75558dbc8fdd8a82c2385b86bbf04a4c

  • SHA1

    6709728f50e497dfd3c77f8549d2e795a5c8901c

  • SHA256

    54826dac588cb75393fc7bbaa5519ebdcf6c75cbe83e7138b1a1a88fc8d46c14

  • SHA512

    6e354405309eefb495297e193577edad740e3d6c79d46ae2a66b91101f4f81b9fbff8f0b3a17c19e0208d02f410d35ca6c1e47a14c24f32a9261cfc30392cfec

  • SSDEEP

    3072:E0oa4fWtMXepSKXhLlwbyXlO140xTEJ4YWvxR4gySk3CRffvfSBqv8wfNgfLout/:E00OtMJ+/asUPTgKxR4s8ojMLoS9

Score
9/10
credential_accessdiscoveryspywarestealerupx

Malware Config

Targets

    • Target

      75558dbc8fdd8a82c2385b86bbf04a4c_JaffaCakes118

    • Size

      169KB

    • MD5

      75558dbc8fdd8a82c2385b86bbf04a4c

    • SHA1

      6709728f50e497dfd3c77f8549d2e795a5c8901c

    • SHA256

      54826dac588cb75393fc7bbaa5519ebdcf6c75cbe83e7138b1a1a88fc8d46c14

    • SHA512

      6e354405309eefb495297e193577edad740e3d6c79d46ae2a66b91101f4f81b9fbff8f0b3a17c19e0208d02f410d35ca6c1e47a14c24f32a9261cfc30392cfec

    • SSDEEP

      3072:E0oa4fWtMXepSKXhLlwbyXlO140xTEJ4YWvxR4gySk3CRffvfSBqv8wfNgfLout/:E00OtMJ+/asUPTgKxR4s8ojMLoS9

    Score
    9/10
    credential_accessdiscoveryspywarestealerupx

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • NirSoft WebBrowserPassView

      Password recovery tool for various web browsers

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks