Overview

overview

9

Static

static

3

d57cc56d0b...18.exe

windows7-x64

9

d57cc56d0b...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d57cc56d0b63ebcd95a6636fcce2b6ba_JaffaCakes118

  • Size

    782KB

  • Sample

    240909-chtd8syhka

  • MD5

    d57cc56d0b63ebcd95a6636fcce2b6ba

  • SHA1

    c2bb1490ec48451657aa4ed6961a2e3f72e321a7

  • SHA256

    d4b7778569d660045763eaeb7982bde5e823659471652f5f5344965d713990b1

  • SHA512

    66b62a1e673be20b43c8bc2bb577b9a30eb313a7061c46f7b149d03f925e9c7b7b21bea21a3acc4b61aaff7609b531c6cdb0bf1a75df802e4ad133e4d4270909

  • SSDEEP

    12288:1/x6eupBHuhReiETAFpei/8dWHmVPlZfvBnRTg9FSZg44CetgrwLVeGskq:1Z6eGZoScFpZaO0lZ3oFJ7nLN

Score
9/10
collectiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      d57cc56d0b63ebcd95a6636fcce2b6ba_JaffaCakes118

    • Size

      782KB

    • MD5

      d57cc56d0b63ebcd95a6636fcce2b6ba

    • SHA1

      c2bb1490ec48451657aa4ed6961a2e3f72e321a7

    • SHA256

      d4b7778569d660045763eaeb7982bde5e823659471652f5f5344965d713990b1

    • SHA512

      66b62a1e673be20b43c8bc2bb577b9a30eb313a7061c46f7b149d03f925e9c7b7b21bea21a3acc4b61aaff7609b531c6cdb0bf1a75df802e4ad133e4d4270909

    • SSDEEP

      12288:1/x6eupBHuhReiETAFpei/8dWHmVPlZfvBnRTg9FSZg44CetgrwLVeGskq:1Z6eGZoScFpZaO0lZ3oFJ7nLN

    Score
    9/10
    collectiondiscoverypersistenceupx

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • NirSoft MailPassView

      Password recovery tool for various email clients

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Accesses Microsoft Outlook accounts

      collection

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks