Overview

overview

7

Static

static

3

ad2e76e716...18.exe

windows7-x64

7

ad2e76e716...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad2e76e71666fe5cc7941db17e25d17a_JaffaCakes118

  • Size

    189KB

  • Sample

    240820-anc84ateqe

  • MD5

    ad2e76e71666fe5cc7941db17e25d17a

  • SHA1

    1bff829738bfd120e73ca978ce47afd1cdbf7b28

  • SHA256

    c19b8e240df5f96b739d1a5f04f4cad307bc07d520d0b1de9685a5b358a500b8

  • SHA512

    12d8d2d9482ac4135f3e2e694ebfeba3060debc8fcb25b7b8bced025e4e994ee034c1b771b6d40b75a243ecca1fcdcae7f6e74ccf76f0627649ddded4296743a

  • SSDEEP

    3072:xlfZYTRaPXhVcRrMDbU3nVQfdmYc7uirA2eZjRm7c49XEIJFsFVSfqcKP9Vk:xlfmTR4hkBVQFC79rwZVi9XEYw19

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      ad2e76e71666fe5cc7941db17e25d17a_JaffaCakes118

    • Size

      189KB

    • MD5

      ad2e76e71666fe5cc7941db17e25d17a

    • SHA1

      1bff829738bfd120e73ca978ce47afd1cdbf7b28

    • SHA256

      c19b8e240df5f96b739d1a5f04f4cad307bc07d520d0b1de9685a5b358a500b8

    • SHA512

      12d8d2d9482ac4135f3e2e694ebfeba3060debc8fcb25b7b8bced025e4e994ee034c1b771b6d40b75a243ecca1fcdcae7f6e74ccf76f0627649ddded4296743a

    • SSDEEP

      3072:xlfZYTRaPXhVcRrMDbU3nVQfdmYc7uirA2eZjRm7c49XEIJFsFVSfqcKP9Vk:xlfmTR4hkBVQFC79rwZVi9XEYw19

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks