Overview

overview

7

Static

static

7

d4ef1dd2d7...18.exe

windows7-x64

7

d4ef1dd2d7...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d4ef1dd2d7caab5bf67401ac0e428355_JaffaCakes118

  • Size

    112KB

  • Sample

    240908-wmml2azaqq

  • MD5

    d4ef1dd2d7caab5bf67401ac0e428355

  • SHA1

    febf6f730b25e2d21d3825a3a210fc6b7501535e

  • SHA256

    7741d4b4e20cead6cd37a0f82286b99f0223d6d0ef261576c73e39339d906f06

  • SHA512

    bca9b8d2070433d417945c30f2b1158f4a15096b51b759787e6713ad4ec77e4fb33e2baac5984f4027de2b1122488a3722132c36b9d46a85709f434cd3101734

  • SSDEEP

    1536:UcNjQlsWjcd+xzl7SM+Gn8255NeoVKcR4mjD9r823FzU:Xjr87S7Gnz55EoVKcWmjRrz3W

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      d4ef1dd2d7caab5bf67401ac0e428355_JaffaCakes118

    • Size

      112KB

    • MD5

      d4ef1dd2d7caab5bf67401ac0e428355

    • SHA1

      febf6f730b25e2d21d3825a3a210fc6b7501535e

    • SHA256

      7741d4b4e20cead6cd37a0f82286b99f0223d6d0ef261576c73e39339d906f06

    • SHA512

      bca9b8d2070433d417945c30f2b1158f4a15096b51b759787e6713ad4ec77e4fb33e2baac5984f4027de2b1122488a3722132c36b9d46a85709f434cd3101734

    • SSDEEP

      1536:UcNjQlsWjcd+xzl7SM+Gn8255NeoVKcR4mjD9r823FzU:Xjr87S7Gnz55EoVKcWmjRrz3W

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks