Overview

overview

10

Static

static

10

b3ea30b624...18.exe

windows7-x64

9

b3ea30b624...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3ea30b624ecacbbfb84dffeb1e59c84_JaffaCakes118

  • Size

    216KB

  • Sample

    240821-salx7avclg

  • MD5

    b3ea30b624ecacbbfb84dffeb1e59c84

  • SHA1

    92be1a27470a3cd6f7be7cb5007b82c5c7cdce91

  • SHA256

    7c2ed3c26179d5815a6da9fe1a485bf855b41ec2573c3183c962b63a06db94a6

  • SHA512

    b8197b53893bf3dc17a1b7cd3c3bde8c7fdc3e11253cd58fd15aa08692bba2eaa7bc592bcf60e36c2fc03100a3d7390e2976e41350deffc8796cbd02c8a08cf8

  • SSDEEP

    6144:RTqPRPdIKCC0ef//uXltKc+LVsz9b8yYU:adFeCXuLKcCVsz6yYU

Score
10/10
isrstealercredential_accessdiscoveryspywarestealerupx

Malware Config

Targets

    • Target

      b3ea30b624ecacbbfb84dffeb1e59c84_JaffaCakes118

    • Size

      216KB

    • MD5

      b3ea30b624ecacbbfb84dffeb1e59c84

    • SHA1

      92be1a27470a3cd6f7be7cb5007b82c5c7cdce91

    • SHA256

      7c2ed3c26179d5815a6da9fe1a485bf855b41ec2573c3183c962b63a06db94a6

    • SHA512

      b8197b53893bf3dc17a1b7cd3c3bde8c7fdc3e11253cd58fd15aa08692bba2eaa7bc592bcf60e36c2fc03100a3d7390e2976e41350deffc8796cbd02c8a08cf8

    • SSDEEP

      6144:RTqPRPdIKCC0ef//uXltKc+LVsz9b8yYU:adFeCXuLKcCVsz6yYU

    Score
    9/10
    credential_accessdiscoveryspywarestealerupx

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks