Overview

overview

10

Static

static

3

ee81cba6c1...18.exe

windows7-x64

10

ee81cba6c1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee81cba6c12232ce1a36dfbb15133272_JaffaCakes118

  • Size

    32KB

  • Sample

    240920-1xj14s1arr

  • MD5

    ee81cba6c12232ce1a36dfbb15133272

  • SHA1

    88a755891da9d021f8c1786bda9bdf2a25afacea

  • SHA256

    1bc095530dbd007d491ef75ce506f2f138e291661e704e709d7c18771d238bd4

  • SHA512

    fc1b5b1a3eeb832916be3978ba84400de5d615c13d9de3792379b674572ede3e61c098b88dca04e1742a20c64988c6635b0d1e8fcc7cca39019c833be37042e0

  • SSDEEP

    768:ne6mh3dWJlgD9R/SsMurovUSGlCDNuC2Q:e7NdWYR/MurUUSGlCDAK

Score
10/10
discoveryevasionexecutionspywarestealer

Malware Config

Targets

    • Target

      ee81cba6c12232ce1a36dfbb15133272_JaffaCakes118

    • Size

      32KB

    • MD5

      ee81cba6c12232ce1a36dfbb15133272

    • SHA1

      88a755891da9d021f8c1786bda9bdf2a25afacea

    • SHA256

      1bc095530dbd007d491ef75ce506f2f138e291661e704e709d7c18771d238bd4

    • SHA512

      fc1b5b1a3eeb832916be3978ba84400de5d615c13d9de3792379b674572ede3e61c098b88dca04e1742a20c64988c6635b0d1e8fcc7cca39019c833be37042e0

    • SSDEEP

      768:ne6mh3dWJlgD9R/SsMurovUSGlCDNuC2Q:e7NdWYR/MurUUSGlCDAK

    Score
    10/10
    discoveryevasionexecutionspywarestealer

    • Disables service(s)

      evasionexecution

    • Stops running service(s)

      evasionexecution

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks