Overview

overview

9

Static

static

9

f0847541f0...18.exe

windows7-x64

9

f0847541f0...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    f0847541f03c1dc5c5f9c1b608eec603_JaffaCakes118

  • Size

    185KB

  • Sample

    240921-yvq1ja1crl

  • MD5

    f0847541f03c1dc5c5f9c1b608eec603

  • SHA1

    6988c72bd89ff705f59354ace99942b7d3f5150b

  • SHA256

    b12990f6bdde4a3a15371a30f21ee874c3447feeb13816e375a429a40fa79217

  • SHA512

    c9fc47fe6cd9bc546022db517a00a6b0fd1abac5ac71b64dcd317359e3a7a02c9053e9f782d5f46db0f3c97162721dfad2880ab33ce51c8d07fc7f96574084a4

  • SSDEEP

    3072:Ln0UwJEec1l4UFkX5NuwdS583AhR+hHIoguKyUxyAY9+rElstX/sJ102Lqag:pwJRY3kpwwoiyWoj5yUd2sVGDx

Score
9/10
credential_accessdiscoveryspywarestealerupx

Malware Config

Targets

    • Target

      f0847541f03c1dc5c5f9c1b608eec603_JaffaCakes118

    • Size

      185KB

    • MD5

      f0847541f03c1dc5c5f9c1b608eec603

    • SHA1

      6988c72bd89ff705f59354ace99942b7d3f5150b

    • SHA256

      b12990f6bdde4a3a15371a30f21ee874c3447feeb13816e375a429a40fa79217

    • SHA512

      c9fc47fe6cd9bc546022db517a00a6b0fd1abac5ac71b64dcd317359e3a7a02c9053e9f782d5f46db0f3c97162721dfad2880ab33ce51c8d07fc7f96574084a4

    • SSDEEP

      3072:Ln0UwJEec1l4UFkX5NuwdS583AhR+hHIoguKyUxyAY9+rElstX/sJ102Lqag:pwJRY3kpwwoiyWoj5yUd2sVGDx

    Score
    9/10
    credential_accessdiscoveryspywarestealerupx

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • NirSoft WebBrowserPassView

      Password recovery tool for various web browsers

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks