Overview

overview

7

Static

static

7

bc376ac317...18.exe

windows7-x64

7

bc376ac317...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc376ac317b088b1737900288d57b061_JaffaCakes118

  • Size

    41KB

  • Sample

    240823-sc47js1cnf

  • MD5

    bc376ac317b088b1737900288d57b061

  • SHA1

    89320b7bb51ccef79c5d6a671c8c042780be44e8

  • SHA256

    ee3f6aace3441323bf9b4dd3626d757357e90b1759b024ebd53cb2423a5f2c5b

  • SHA512

    892eb9d40c7369a6408b9242863996d3d905114ce5ba339ea7283d2133e7cf7c94d1d86caf86b660b4340b1dd1085527b1a754c5cb3d28f6316d42f4e9d9ce8e

  • SSDEEP

    768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIorMtWcw5eGj5uiwbPE:egKcR4mjD9r82qMtWcEPwbPE

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      bc376ac317b088b1737900288d57b061_JaffaCakes118

    • Size

      41KB

    • MD5

      bc376ac317b088b1737900288d57b061

    • SHA1

      89320b7bb51ccef79c5d6a671c8c042780be44e8

    • SHA256

      ee3f6aace3441323bf9b4dd3626d757357e90b1759b024ebd53cb2423a5f2c5b

    • SHA512

      892eb9d40c7369a6408b9242863996d3d905114ce5ba339ea7283d2133e7cf7c94d1d86caf86b660b4340b1dd1085527b1a754c5cb3d28f6316d42f4e9d9ce8e

    • SSDEEP

      768:eyX3LKew369lp2z3Sd4baFXLjwP/Tgj93b8NIorMtWcw5eGj5uiwbPE:egKcR4mjD9r82qMtWcEPwbPE

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks