Overview

overview

7

Static

static

7

dd6d36bb28...18.exe

windows7-x64

7

dd6d36bb28...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd6d36bb281db3da32da9426334f2940_JaffaCakes118

  • Size

    334KB

  • Sample

    240913-b3qneaxglb

  • MD5

    dd6d36bb281db3da32da9426334f2940

  • SHA1

    e76ec64687f267f339c69a7d969b886a1678af90

  • SHA256

    ddcc8ffdd06fa041e3886a43339446a593a159df90ca75f6bcc91bb7edcdb019

  • SHA512

    bbc34090edc8076513f030c1aa6d2e624e19556bf25db6dc9ddb0ddc61cd2db6d020b570f3c9445676dca8b15e1109b20392905badc1f9ce8dc3f0d732b6a6c6

  • SSDEEP

    6144:AZvMGeXGYyssC4G1Dh2su5yokyF4D4LlWNQDxvuqDKXonRHSbHLl9:AdM3XVyss76ksusywOTNWzokHZ9

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      dd6d36bb281db3da32da9426334f2940_JaffaCakes118

    • Size

      334KB

    • MD5

      dd6d36bb281db3da32da9426334f2940

    • SHA1

      e76ec64687f267f339c69a7d969b886a1678af90

    • SHA256

      ddcc8ffdd06fa041e3886a43339446a593a159df90ca75f6bcc91bb7edcdb019

    • SHA512

      bbc34090edc8076513f030c1aa6d2e624e19556bf25db6dc9ddb0ddc61cd2db6d020b570f3c9445676dca8b15e1109b20392905badc1f9ce8dc3f0d732b6a6c6

    • SSDEEP

      6144:AZvMGeXGYyssC4G1Dh2su5yokyF4D4LlWNQDxvuqDKXonRHSbHLl9:AdM3XVyss76ksusywOTNWzokHZ9

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks