Overview

overview

7

Static

static

3

d49293220c...18.exe

windows7-x64

7

d49293220c...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d49293220c5f0d4190c6e3a804a5af2c_JaffaCakes118

  • Size

    376KB

  • Sample

    240908-rvybaatcjh

  • MD5

    d49293220c5f0d4190c6e3a804a5af2c

  • SHA1

    213ea1d55e25ea7d505e8d043358350eef50bf41

  • SHA256

    e562fbd6bd0af83ea99cd6932a4552dcfe8264bf5e34d25fbb35a15eb06594c8

  • SHA512

    8c618d83c5617656f08c4028406de241a2583bdc72a3e40bd51f05ef8baf38f8761824a2b0d41c940ee900466c8f99cf1d1fe85984e48093330d3fa4f25a08de

  • SSDEEP

    6144:hFLt7ftDrpeYF6QUMzrDr4r3CRiLrdxlsW9b4yXaQ5mdPBj7Al1YO6C8:hFLt7ftDrEYF6WvK32ezsWBlXz5mNd7h

Score
7/10
credential_accessdiscoveryspywarestealer

Malware Config

Targets

    • Target

      d49293220c5f0d4190c6e3a804a5af2c_JaffaCakes118

    • Size

      376KB

    • MD5

      d49293220c5f0d4190c6e3a804a5af2c

    • SHA1

      213ea1d55e25ea7d505e8d043358350eef50bf41

    • SHA256

      e562fbd6bd0af83ea99cd6932a4552dcfe8264bf5e34d25fbb35a15eb06594c8

    • SHA512

      8c618d83c5617656f08c4028406de241a2583bdc72a3e40bd51f05ef8baf38f8761824a2b0d41c940ee900466c8f99cf1d1fe85984e48093330d3fa4f25a08de

    • SSDEEP

      6144:hFLt7ftDrpeYF6QUMzrDr4r3CRiLrdxlsW9b4yXaQ5mdPBj7Al1YO6C8:hFLt7ftDrEYF6WvK32ezsWBlXz5mNd7h

    Score
    7/10
    credential_accessdiscoveryspywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks