Overview

overview

7

Static

static

7

ad13eca79f...18.exe

windows7-x64

7

ad13eca79f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad13eca79f6b4ce6dd25be461ffffee4_JaffaCakes118

  • Size

    309KB

  • Sample

    240819-3s1t6ssdqe

  • MD5

    ad13eca79f6b4ce6dd25be461ffffee4

  • SHA1

    b7d4a5bb99237a74188926754aee30e16b9d631f

  • SHA256

    d70609cdd643604cfbcfaa78335ac061a8620951db0124bc6bd27c2b1b9a5eee

  • SHA512

    cac82d9792f060f7c8291ddcc6e4569258fd43873a1314c86783f9801292abc915db4dc58acfc544e5cee0b0b7ab8bd4e7e7fb3aeb8cec4383832ea1acf74e40

  • SSDEEP

    3072:Xjr87S7Gnz55Eorr3KcWmjRrzSIasSB+uAriPkcfMVulnkOIiNootOmke/Rud8hQ:sZl2JrJdMohIVoETdah6KX9qfheW

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      ad13eca79f6b4ce6dd25be461ffffee4_JaffaCakes118

    • Size

      309KB

    • MD5

      ad13eca79f6b4ce6dd25be461ffffee4

    • SHA1

      b7d4a5bb99237a74188926754aee30e16b9d631f

    • SHA256

      d70609cdd643604cfbcfaa78335ac061a8620951db0124bc6bd27c2b1b9a5eee

    • SHA512

      cac82d9792f060f7c8291ddcc6e4569258fd43873a1314c86783f9801292abc915db4dc58acfc544e5cee0b0b7ab8bd4e7e7fb3aeb8cec4383832ea1acf74e40

    • SSDEEP

      3072:Xjr87S7Gnz55Eorr3KcWmjRrzSIasSB+uAriPkcfMVulnkOIiNootOmke/Rud8hQ:sZl2JrJdMohIVoETdah6KX9qfheW

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks