Overview

overview

7

Static

static

3

a1d97a73c3...18.exe

windows7-x64

7

a1d97a73c3...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1d97a73c373d7bfe096f6311123df30_JaffaCakes118

  • Size

    177KB

  • Sample

    240817-kerp8szblm

  • MD5

    a1d97a73c373d7bfe096f6311123df30

  • SHA1

    7377f638bbc8fddad125d82dcdacb3144875b610

  • SHA256

    7d2485f1e1d84c29867b1ffa7f95610a26d3c908d1493faa158faddd20bf786f

  • SHA512

    b22da30c290df6affadf921bfb2d3ead4ffc735af3341ccfbed8c53a2d3ac10285e7d16e82f9c4ae1343c6a08d3f2c918fe7588d8e824bebfcde15421cef1d53

  • SSDEEP

    3072:NZHRVAyMJ35TQ+1HxzKHpZQJDUORx/pDJHn4onyXJ1/kkLUoZ/:NjVSPbzKJZQJQ+pVYoeJ1TL

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      a1d97a73c373d7bfe096f6311123df30_JaffaCakes118

    • Size

      177KB

    • MD5

      a1d97a73c373d7bfe096f6311123df30

    • SHA1

      7377f638bbc8fddad125d82dcdacb3144875b610

    • SHA256

      7d2485f1e1d84c29867b1ffa7f95610a26d3c908d1493faa158faddd20bf786f

    • SHA512

      b22da30c290df6affadf921bfb2d3ead4ffc735af3341ccfbed8c53a2d3ac10285e7d16e82f9c4ae1343c6a08d3f2c918fe7588d8e824bebfcde15421cef1d53

    • SSDEEP

      3072:NZHRVAyMJ35TQ+1HxzKHpZQJDUORx/pDJHn4onyXJ1/kkLUoZ/:NjVSPbzKJZQJQ+pVYoeJ1TL

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks