Overview

overview

7

Static

static

7

e042a898c0...18.exe

windows7-x64

7

e042a898c0...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e042a898c055b90de6a6e2700c7c00bf_JaffaCakes118

  • Size

    259KB

  • Sample

    240914-qjf27awaln

  • MD5

    e042a898c055b90de6a6e2700c7c00bf

  • SHA1

    a2fd7d197c8be5dc0c8cf5a4e521b01f22fbf548

  • SHA256

    3dabaf0788af1e51c115ffa8bae60c46e591d7fc9d0499ed6eb2848ca28db44e

  • SHA512

    e441e3e6315c360198e98f335c9765458c2d556f5f55b4ae2601a9d197b94790f6e3c032b08006bd05ae8d6a6453c5894976a5ca2b8d4ccfd9edefe9cf9457f0

  • SSDEEP

    6144:4lg3+sNDZ9t/unyTnaMUYoHQ9FfAV5UMEjSZsXWZRjoS:Sg3+uP2nOaMUYoHQ9OUM7oS

Score
7/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      e042a898c055b90de6a6e2700c7c00bf_JaffaCakes118

    • Size

      259KB

    • MD5

      e042a898c055b90de6a6e2700c7c00bf

    • SHA1

      a2fd7d197c8be5dc0c8cf5a4e521b01f22fbf548

    • SHA256

      3dabaf0788af1e51c115ffa8bae60c46e591d7fc9d0499ed6eb2848ca28db44e

    • SHA512

      e441e3e6315c360198e98f335c9765458c2d556f5f55b4ae2601a9d197b94790f6e3c032b08006bd05ae8d6a6453c5894976a5ca2b8d4ccfd9edefe9cf9457f0

    • SSDEEP

      6144:4lg3+sNDZ9t/unyTnaMUYoHQ9FfAV5UMEjSZsXWZRjoS:Sg3+uP2nOaMUYoHQ9OUM7oS

    Score
    7/10
    discoverypersistencespywarestealerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks