Overview

overview

10

Static

static

3

95268a7ca9...18.exe

windows7-x64

10

95268a7ca9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95268a7ca995494a01a1fae4f8c64386_JaffaCakes118

  • Size

    340KB

  • Sample

    240814-jaw9gsvcnk

  • MD5

    95268a7ca995494a01a1fae4f8c64386

  • SHA1

    45b50cc7827903fd182dfd79a945b86934dc4f9d

  • SHA256

    e1315c5d45b564fcd7732dc134c758e2b14ae3972c81235bbd15424bbb2f7bb5

  • SHA512

    cddf7ba8ca744cce7efaec5d68afcf35767d8fe23e36bd6302cfd00c75cf3aa9a22968b60c0649bb3bd2abd75677c72f851344bda479f808bd807e3b4261a296

  • SSDEEP

    6144:IEB6DO7G6DPaxOyVBWQc0PmtqtLd8brLdbOqhIkIxWe8NTC0Sge:IEsDqrHybWQchaLd8nLdbt7/NXJe

Score
10/10
discoveryevasionspywarestealerupx

Malware Config

Targets

    • Target

      95268a7ca995494a01a1fae4f8c64386_JaffaCakes118

    • Size

      340KB

    • MD5

      95268a7ca995494a01a1fae4f8c64386

    • SHA1

      45b50cc7827903fd182dfd79a945b86934dc4f9d

    • SHA256

      e1315c5d45b564fcd7732dc134c758e2b14ae3972c81235bbd15424bbb2f7bb5

    • SHA512

      cddf7ba8ca744cce7efaec5d68afcf35767d8fe23e36bd6302cfd00c75cf3aa9a22968b60c0649bb3bd2abd75677c72f851344bda479f808bd807e3b4261a296

    • SSDEEP

      6144:IEB6DO7G6DPaxOyVBWQc0PmtqtLd8brLdbOqhIkIxWe8NTC0Sge:IEsDqrHybWQchaLd8nLdbt7/NXJe

    Score
    10/10
    discoveryevasionspywarestealerupx

    • Modifies security service

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks