Overview

overview

9

Static

static

7

d6fac4bcb9...18.exe

windows7-x64

9

d6fac4bcb9...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6fac4bcb95eb8dd62a8c4d089cff7d2_JaffaCakes118

  • Size

    569KB

  • Sample

    240909-yel2msycjb

  • MD5

    d6fac4bcb95eb8dd62a8c4d089cff7d2

  • SHA1

    583cecfd338fd83618ad3657b1605e9e646d0dca

  • SHA256

    07087b4a1c18699b737638b6ea8c049cf811de2e0763851a694ca5e4ac32ee40

  • SHA512

    09c3b8eafd3624cb1817dab2be4ef5f65f2ea5dfb168a107ba5ad1c8828a5c93139124084cabf888b8c14ca5b07c1205461998fd3218cd459a53d2fef462899c

  • SSDEEP

    12288:VvgdDNS2mQpGaPHCE4CNHQM80UMF1VXGEuNbIaLeirUqCazA1J:VvgdDT9pGCCE4I104wVmigqCyA1J

Score
9/10
credential_accessdiscoveryspywarestealerupx

Malware Config

Targets

    • Target

      d6fac4bcb95eb8dd62a8c4d089cff7d2_JaffaCakes118

    • Size

      569KB

    • MD5

      d6fac4bcb95eb8dd62a8c4d089cff7d2

    • SHA1

      583cecfd338fd83618ad3657b1605e9e646d0dca

    • SHA256

      07087b4a1c18699b737638b6ea8c049cf811de2e0763851a694ca5e4ac32ee40

    • SHA512

      09c3b8eafd3624cb1817dab2be4ef5f65f2ea5dfb168a107ba5ad1c8828a5c93139124084cabf888b8c14ca5b07c1205461998fd3218cd459a53d2fef462899c

    • SSDEEP

      12288:VvgdDNS2mQpGaPHCE4CNHQM80UMF1VXGEuNbIaLeirUqCazA1J:VvgdDT9pGCCE4I104wVmigqCyA1J

    Score
    9/10
    credential_accessdiscoveryspywarestealerupx

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks