Overview

overview

10

Static

static

3

dc3e3341ac...18.exe

windows7-x64

10

dc3e3341ac...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc3e3341acc3eb9ca2795221f89e76ef_JaffaCakes118

  • Size

    98KB

  • Sample

    240912-np2jzatdkk

  • MD5

    dc3e3341acc3eb9ca2795221f89e76ef

  • SHA1

    47218da9c01925f92d62e7d62e8349997cd04e68

  • SHA256

    901a7c8ecf6c7788c39657ff5122b09a848bc0eb678a66dca8b484c0f60d03c3

  • SHA512

    13761c2528e43edf8da65bfd4ad723740f4503a86a2c2c4ce6c2da11914331b96727daf8f4b1796ee989e490c430e7268dc17556e6a1e45b397fe33eac3bf2e9

  • SSDEEP

    1536:TCsEIU4OyUVjbhbznprieKRtyDs5gbhyresGG8o+R24:vEOOnVftznd0ub+esGvNRX

Score
10/10
ponycredential_accessdiscoveryratspywarestealer

Malware Config

Targets

    • Target

      dc3e3341acc3eb9ca2795221f89e76ef_JaffaCakes118

    • Size

      98KB

    • MD5

      dc3e3341acc3eb9ca2795221f89e76ef

    • SHA1

      47218da9c01925f92d62e7d62e8349997cd04e68

    • SHA256

      901a7c8ecf6c7788c39657ff5122b09a848bc0eb678a66dca8b484c0f60d03c3

    • SHA512

      13761c2528e43edf8da65bfd4ad723740f4503a86a2c2c4ce6c2da11914331b96727daf8f4b1796ee989e490c430e7268dc17556e6a1e45b397fe33eac3bf2e9

    • SSDEEP

      1536:TCsEIU4OyUVjbhbznprieKRtyDs5gbhyresGG8o+R24:vEOOnVftznd0ub+esGvNRX

    Score
    10/10
    ponycredential_accessdiscoveryratspywarestealer

    • Pony,Fareit

      Pony is a Remote Access Trojan application that steals information.

      ratspywarestealerpony

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unsecured Credentials: Credentials In Files

      Steal credentials from unsecured files.

      credential_accessstealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks