Overview

overview

9

Static

static

3

e9fff40e82...18.exe

windows7-x64

9

e9fff40e82...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9fff40e82a32a34cd114d4847bd8293_JaffaCakes118

  • Size

    635KB

  • Sample

    240918-z9xbjaterg

  • MD5

    e9fff40e82a32a34cd114d4847bd8293

  • SHA1

    f276253fec2a35990a0f4c58455598003c5e0b0b

  • SHA256

    1cb8b17ddcbcc24f222422476ab2416f6b7426257b1397b2642f2941b52a2536

  • SHA512

    9727be21f954be3b36fd0de4d6356f7e65a03c5d0ca9fea21487ac923415693c8aaf85d5df0719b8edbfa58aa7d116ef4df5661d87ba9a42f0f5c3b9a4804f5d

  • SSDEEP

    12288:GXyZ9OB1+rvybfo7LMarxx0mMlUBd8T6+o/jxUSGh/DzZc:Gmqvfygc8uBE6+OjaQ

Score
9/10
credential_accessdiscoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      e9fff40e82a32a34cd114d4847bd8293_JaffaCakes118

    • Size

      635KB

    • MD5

      e9fff40e82a32a34cd114d4847bd8293

    • SHA1

      f276253fec2a35990a0f4c58455598003c5e0b0b

    • SHA256

      1cb8b17ddcbcc24f222422476ab2416f6b7426257b1397b2642f2941b52a2536

    • SHA512

      9727be21f954be3b36fd0de4d6356f7e65a03c5d0ca9fea21487ac923415693c8aaf85d5df0719b8edbfa58aa7d116ef4df5661d87ba9a42f0f5c3b9a4804f5d

    • SSDEEP

      12288:GXyZ9OB1+rvybfo7LMarxx0mMlUBd8T6+o/jxUSGh/DzZc:Gmqvfygc8uBE6+OjaQ

    Score
    9/10
    credential_accessdiscoverypersistencespywarestealerupx

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks