Overview

overview

9

Static

static

7

882dacbbdf...18.exe

windows7-x64

9

882dacbbdf...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    882dacbbdf98ca5d6ded1f9645195056_JaffaCakes118

  • Size

    987KB

  • Sample

    240810-3ycpjaygmh

  • MD5

    882dacbbdf98ca5d6ded1f9645195056

  • SHA1

    016f089d2a6e5088718009256c8f10aff85499d0

  • SHA256

    2114b1dc45ee1031fb4a5e8482186e7cd45ad3e31d80806bb1acb85fc3a19f2f

  • SHA512

    ee4438cf93cde7e8e33bc70ef70d27b107245082e57bf539eb6c5788eab8c3c436fa7a814f240c74a3724934bca4c7e142a546259d0b9e350add878e073ee01b

  • SSDEEP

    24576:HKEy7lBI3+ZO5Zzz/QbBr4ZKrjTql2EYbz:HKEUlm3+ZYQ1rbHzEYbz

Score
9/10
credential_accessdiscoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      882dacbbdf98ca5d6ded1f9645195056_JaffaCakes118

    • Size

      987KB

    • MD5

      882dacbbdf98ca5d6ded1f9645195056

    • SHA1

      016f089d2a6e5088718009256c8f10aff85499d0

    • SHA256

      2114b1dc45ee1031fb4a5e8482186e7cd45ad3e31d80806bb1acb85fc3a19f2f

    • SHA512

      ee4438cf93cde7e8e33bc70ef70d27b107245082e57bf539eb6c5788eab8c3c436fa7a814f240c74a3724934bca4c7e142a546259d0b9e350add878e073ee01b

    • SSDEEP

      24576:HKEy7lBI3+ZO5Zzz/QbBr4ZKrjTql2EYbz:HKEUlm3+ZYQ1rbHzEYbz

    Score
    9/10
    credential_accessdiscoverypersistencespywarestealerupx

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks