Overview

overview

7

Static

static

3

d5a4b0263a...18.exe

windows7-x64

7

d5a4b0263a...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5a4b0263a511326fb1faf4f5ac1a17f_JaffaCakes118

  • Size

    158KB

  • Sample

    240909-eyhzjstfqh

  • MD5

    d5a4b0263a511326fb1faf4f5ac1a17f

  • SHA1

    1f5807acb52588f7807d673177c97f35b93accc9

  • SHA256

    10ab5580d79fa06cb32d623c891fd0ae6d1e648690788392e08b98ffa3d7906b

  • SHA512

    e8b623109714a1190eb580ed581653f723591abc51f4b3370fc09e9216557c51ed888012780d0276094a719555a335784b6f47ba1febb0347904a0387849fc2e

  • SSDEEP

    3072:6F3gsMRrcx5t6iiOdPc1q/E/k16YNBnFP4Xe3DK6LyGtDtCYkL:2gTRrcztKik1ME/A6WXQ4DKACYkL

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      d5a4b0263a511326fb1faf4f5ac1a17f_JaffaCakes118

    • Size

      158KB

    • MD5

      d5a4b0263a511326fb1faf4f5ac1a17f

    • SHA1

      1f5807acb52588f7807d673177c97f35b93accc9

    • SHA256

      10ab5580d79fa06cb32d623c891fd0ae6d1e648690788392e08b98ffa3d7906b

    • SHA512

      e8b623109714a1190eb580ed581653f723591abc51f4b3370fc09e9216557c51ed888012780d0276094a719555a335784b6f47ba1febb0347904a0387849fc2e

    • SSDEEP

      3072:6F3gsMRrcx5t6iiOdPc1q/E/k16YNBnFP4Xe3DK6LyGtDtCYkL:2gTRrcztKik1ME/A6WXQ4DKACYkL

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks